<IfModule mod_rewrite.c>
  RewriteEngine On
  # the data directory is never web-accessible
  RewriteRule .* - [F,L]
</IfModule>
Require all denied
