Options -Indexes
DirectoryIndex index.php

<IfModule mod_rewrite.c>
    RewriteEngine On

    RewriteRule (^|/)\. - [F,L]
    RewriteRule ^(app|storage|config|tools)(/|$) - [F,L,NC]
    RewriteRule (^|/).*\.(sqlite|log|env)$ - [F,L,NC]

    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule ^(.+)$ index.php?route=/$1 [QSA,L]
</IfModule>

<FilesMatch "(^\.|\.user\.ini$|\.env$|\.log$|\.sqlite$|config\.php$)">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Deny from all
    </IfModule>
</FilesMatch>
