RewriteEngine On

RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^ - [L]

RewriteRule ^ public/index.php [QSA,L]

<FilesMatch "\.(env|log|ini|conf|json|lock)$">
    Require all denied
</FilesMatch>

RewriteRule ^app/ - [F,L]
RewriteRule ^config/ - [F,L]
RewriteRule ^logs/ - [F,L]
RewriteRule ^vendor/ - [F,L]