diff --git a/.htaccess b/.htaccess
index 2b8c78ba..9cf66136 100644
--- a/.htaccess
+++ b/.htaccess
@@ -13,5 +13,24 @@ RewriteCond %{REQUEST_FILENAME} !-f
 RewriteCond %{REQUEST_URI} !^/public/
 RewriteRule ^(assets)/(.*)$ public/$1/$2 [L,NC]
 
-#disable viewing all hiden files
+# disable viewing all hiden files
 RedirectMatch 403 /\..*$
+
+# disable browsing other files in root
+RedirectMatch 403 /composer.*
+RedirectMatch 403 /artisan
+RedirectMatch 403 /phpunit.xml
+
+# disable browsing directories
+# this should be solved also with Option -Indexes, however...
+RedirectMatch 403 /app
+RedirectMatch 403 /artisan
+RedirectMatch 403 /bootstrap
+RedirectMatch 403 /config
+RedirectMatch 403 /database
+RedirectMatch 403 /modules
+RedirectMatch 403 /resources
+RedirectMatch 403 /scripts
+RedirectMatch 403 /storage
+RedirectMatch 403 /tests
+RedirectMatch 403 /vendor