You can prevent unauthorized access to your htaccess file by adding this rule to the file: # .htaccess protection order allow, deny deny from all satisfy all