.htaccess

# Database Web API
# @author Marco Cesarato <cesarato.developer@gmail.com>
# @copyright Copyright (c) 2018
# @license http://opensource.org/licenses/gpl-3.0.html GNU Public License
# @link https://github.com/marcocesarato/Database-Web-API

<IfModule mod_rewrite.c>

	RewriteEngine On
    Options +FollowSymlinks
    Options +SymLinksIfOwnerMatch
    Options -MultiViews

	RewriteBase /

	RewriteCond $0#%{REQUEST_URI} ([^#]*)#(.*)\1$
	RewriteRule ^.*$ - [E=CWD:%2]

	# Deny some methods
    RewriteCond %{REQUEST_METHOD} ^(TRACE|OPTIONS)
    RewriteRule .* – [L,F]

    RewriteRule .*\.(git|svn|hg).* %{ENV:CWD}index.php [L] # Deny access repo folder
    RewriteRule ^(config|composer|docs|.*\.([Hh][Tt][Aa])).* %{ENV:CWD}index.php [L] # Deny access
    RewriteRule ^(vendor|hooks|plugins|logs|screenshot|screenshots|screens|docs|documentation|clients)/((.*)\.php)?$ %{ENV:CWD}index.php [L] # Forbidden

	RewriteCond %{REQUEST_FILENAME} !-f
	RewriteCond %{REQUEST_FILENAME} !-d
	RewriteRule . %{ENV:CWD}index.php [L,QSA]

</IfModule>

# File protection
<Files ~ "^(config|config\.(.*))\.php">
    Order Allow,Deny
    Deny from all
</Files>
<Files ~ "^(composer)\.(.*)">
    Order Allow,Deny
    Deny from all
</Files>
<Files ~ "^.*\.([Hh][Tt][Aa])">
    Order Allow,Deny
    Deny from all
    Satisfy all
</Files>
<Files ~ "\.sqlite$">
	Order Allow,Deny
	Deny from All
</Files>
<FilesMatch "\.(log|md|backup|bak|bk|old|o|zip|tar|gz|rar)$">
    Order Allow,Deny
    Deny from All
</FilesMatch>