https://sangkrit.net/increase-wordpress-security-by-locking-down-htaccess-wp-config-php-hiding-readme-html-other-files/