protect configuration file

# protect wpconfig.php
<files wp-config.php>
    order allow,deny
    deny from all
</files>