https://sangkrit.net/how-to-protect-wp-config-php-and-htaccess-files-in-wordpress/