# Block direct access to config, cron scripts and logs.
<FilesMatch "^(config\.php|.*\.sql|.*\.log)$">
  Require all denied
</FilesMatch>
RedirectMatch 404 ^/(cron|logs|src|fonts)/
