Options -Indexes

<IfModule mod_rewrite.c>
RewriteEngine On

# bloquear acceso directo SOLO a PHP
RewriteCond %{THE_REQUEST} \s/+app/administrator/.*\.php [NC]
RewriteRule ^.*$ - [F,L]

</IfModule>