diff --git a/workflow/public_html/.htaccess b/workflow/public_html/.htaccess
new file mode 100644
index 000000000..458bcdada
--- /dev/null
+++ b/workflow/public_html/.htaccess
@@ -0,0 +1,9 @@
+<FilesMatch "\.(htaccess|php|ini|log|sh|inc|bak|config)$">
+        Order Allow,Deny
+        Deny from all
+</FilesMatch>
+
+<FilesMatch "^(app|sysGeneric)\.php$">
+        Order Allow,Deny 
+        Allow from All 
+</FilesMatch>
\ No newline at end of file