Options -Indexes
<FilesMatch "(?i)\.(?:sqlite|sqlite3|db|sql|json|php[0-9]?|phtml|pht|phar|bak|backup|old|orig|log|ini|env)$">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Deny from all
    </IfModule>
</FilesMatch>
