diff --git a/.htaccess b/.htaccess
index 3aec5e2..ab13927 100644
--- a/.htaccess
+++ b/.htaccess
@@ -19,3 +19,13 @@
     RewriteCond %{REQUEST_FILENAME} !-f
     RewriteRule ^ index.php [L]
 </IfModule>
+
+# Restrict access to critical files
+<FilesMatch "^\.">
+Order allow,deny
+Deny from all
+</FilesMatch>
+<Files ~ "\.sqlite$">
+    Order allow,deny
+    Deny from all
+</Files>