IndexIgnore *
<Files .htaccess>
Deny from all
</Files>
<Files config.core.php>
Deny from all
</Files>
Order Allow, Deny
Deny from All
And btw, is it normal that file config.core.php was placed in the root directory automatically? I've just noticed it. It contains a path to core and has an open access.