Options -Indexes
# Block direct access to PHP files outside /api and /install and /verify.php
<FilesMatch "\.php$">
  Order Allow,Deny
  Deny from all
</FilesMatch>
<Files "verify.php">
  Order Allow,Deny
  Allow from all
</Files>
# Allow api directory
<FilesMatch "^$">
  Order Allow,Deny
  Allow from all
</FilesMatch>
