<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteRule ^api/(.*)$ - [L]
</IfModule>

<FilesMatch "^(config|db)\.php$">
  <IfModule mod_authz_core.c>
    Require all denied
  </IfModule>
  <IfModule !mod_authz_core.c>
    Deny from all
  </IfModule>
</FilesMatch>
