# Protect config.php from direct web access
<Files "config.php">
    Order deny,allow
    Deny from all
</Files>