"Deny direct access except for the files and subdirectories with rewritten urls without file types" . . . .