# deny all external requests
<FilesMatch ".(htaccess|tpl|php|xml)$">
 Order Allow,Deny
 Deny from all
</FilesMatch>