RewriteEngine On
RewriteBase /

# Redirect all requests to index.php
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ index.php [L]

# Prevent directory listing
Options -Indexes

# Secure config and includes
<Files "assets/config.php">
    Order Allow,Deny
    Deny from all
</Files>
<Files "includes">
    Order Allow,Deny
    Deny from all
</Files>