# Prevent directory listing
IndexIgnore *

# Prevent direct access to extension api end-points
RedirectMatch 403 [^/]+/api\.php$