
<Files .htaccess>
order allow,deny
deny from all
</Files>

Options +FollowSymLinks

#block access to folder other than software referrer for these type files

RewriteEngine on
RewriteCond %{HTTP_HOST}@@%{HTTP_REFERER} !^([^@]*)@@https?://\1/.*  [NC]

#browsers send blank referrer so block url in browser too
#you might allow here but then block in sub domain
#optional but not always recommended - allow blank referrer
#we leave this off for good reason
#RewriteCond %{HTTP_REFERER} !^$

RewriteRule .*\.(txt|pdf|docx|doc)$ - [F,NC,L]

#end block