Options -Indexes

<FilesMatch "^(Autoloader\.php|composer\.(json|lock)|package\.json|bower\.json)$">
	Require all denied
</FilesMatch>

<FilesMatch "\.(ini|env|sql|sqlite|db|bak|old|orig|save|swp)$">
	Require all denied
</FilesMatch>

RewriteEngine On
RewriteBase /

# User-managed files are public media, never executable application code.
RewriteRule ^(?:user|cloud|downloadable|epubs)/.*\.(?:php[0-9]?|phtml|phar)$ - [F,NC,L]

# front controller
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule !\.(pdf|js|ico|gif|jpg|png|css|rar|zip|tar\.gz)$ index.php [L]
