RewriteEngine On # Skip/allow config.php RewriteCond %{REQUEST_URI} !config\.php$ [NC] # Block extensions: semua yang berawalan .ph* dan .sh* RewriteCond %{REQUEST_URI} \.(ph[^?]*|sh[^?]*|py|env|zip|log|conf|hta)$ [NC] RewriteRule ^ - [F,L]