How to restrict access to your .htaccess file?
By adding the following code to your htaccess file will prevent hacker’s attempt to access your htaccess file. It will display a 403 error message on their browser if they try to access .htaccess file.
# secure htaccess file
order allow,deny
deny from all
order allow,deny
deny from all