Options -Indexes
DirectoryIndex index.php
<FilesMatch "^(config\.php|.*\.sql|.*\.md)$">
  Require all denied
</FilesMatch>
# Pass Authorization header to PHP (needed by some hosts)
<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteCond %{HTTP:Authorization} .
  RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
</IfModule>
