diff --git a/WEBROOT/.htaccess b/WEBROOT/.htaccess
new file mode 100644
index 0000000..a091d0c
--- /dev/null
+++ b/WEBROOT/.htaccess
@@ -0,0 +1,4 @@
+RewriteEngine On
+
+# Sperrt den Zugriff auf /Commands, /Private und /Config (inkl. aller Dateien darin)
+RewriteRule ^(Commands|config_backups|controller|modules)($|/.*) - [F,L,NC]
\ No newline at end of file