Better htaccess rules. All file extensions are blocked except for images. Images must be allowed to have direct access because of thumbnails