diff --git a/.htaccess b/.htaccess
new file mode 100644
index 00000000..f38dbabc
--- /dev/null
+++ b/.htaccess
@@ -0,0 +1,2 @@
+# Prevent access to .git, .github, and config.php
+RedirectMatch 404 ^/(\.git|\.github|config\.php)
\ No newline at end of file