Restrict access to public files only 

Use ModRewrite to return 404 for dangerous files #12423