Create your htaccess file. The following is recommended:

```
# Block evil spam bots
# List found on : perishablepress.com/press/2006/01/10/stupid-htaccess-tricks/#sec1
RewriteBase /
RewriteCond %{HTTP_USER_AGENT} ^Anarchie [OR]
RewriteCond %{HTTP_USER_AGENT} ^ASPSeek [OR]
RewriteCond %{HTTP_USER_AGENT} ^attach [OR]
RewriteCond %{HTTP_USER_AGENT} ^autoemailspider [OR]
RewriteCond %{HTTP_USER_AGENT} ^Xaldon\ WebSpider [OR]
RewriteCond %{HTTP_USER_AGENT} ^Xenu [OR]
RewriteCond %{HTTP_USER_AGENT} ^Zeus.*Webster [OR]
RewriteCond %{HTTP_USER_AGENT} ^Zeus
RewriteRule ^.* - [F,L]

# Block access to internal code

Options All -Indexes
RewriteEngine On
# Force redirect to strip www from front of domain names
RewriteCond %{HTTP_HOST} ^www\.(.*)$ [NC]
RewriteRule ^(.*)$ %1/$1 [R=301,L]
# Allow access to artweb themes and cache, everything is considered public
RewriteRule ^ciniki-web-layouts/(.*\.)(css|js|png|eot|ttf|woff|svg)$ ciniki-mods/web/layouts/$1$2 [L]
RewriteRule ^ciniki-web-themes/(.*\.)(css|js|html|png|jpg)$ ciniki-mods/web/themes/$1$2 [L]
RewriteRule ^ciniki-web-cache/(.*\.)(css|js|jpg|gif||png|mp3|ogg|wav)$ ciniki-mods/web/cache/$1$2 [L]
RewriteRule ^ciniki-mail-cache/(.*\.)(pdf|js|jpg|png|mp3|ogg|wav)$ ciniki-mods/mail/cache/$1$2 [L]
RewriteRule ^ciniki-code/(.*\.)(zip|ini)$ ciniki-code/$1$2 [L]
RewriteBase /

AddType text/cache-manifest .manifest

RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^manager/(.*)$ ciniki-manage.php [L] # allow all ciniki-manage
RewriteRule ^(manager)$ ciniki-manage.php [L] # allow all ciniki-manage
RewriteRule ^(ciniki-mods/[^\/]*/ui/.*)$ $1 [L] # Allow manage content
RewriteRule ^(ciniki-web-themes/.*)$ $1 [L] # Allow manage-theme content
RewriteRule ^(ciniki-mods/web/layouts/.*)$ $1 [L] # Allow web-layouts content
RewriteRule ^(ciniki-mods/web/themes/.*)$ $1 [L] # Allow web-themes content
RewriteRule ^(ciniki-mods/web/cache/.*\.(css|js|jpg|png|mp3|ogg|wav))$ $1 [L] # Allow web-cache content
RewriteRule ^(ciniki-mods/mail/cache/.*\.(pdf|js|jpg|png|mp3|ogg|wav))$ $1 [L] # Allow mail-cache content
RewriteRule ^(phpinfo|paypal-ipn|ciniki-login|ciniki-sync|ciniki-json|ciniki-rest|index|ciniki-manage|ciniki-iframe|ciniki-apis).php$ $1.php [L] # allow entrance php files
RewriteRule ^([_0-9a-zA-Z-]+/)(.*\.php)$ index.php [L] # Redirect all other php requests to index
RewriteRule . index.php [L] # Redirect all other requests to index

php_value post_max_size 20M
php_value upload_max_filesize 20M
php_value magic_quotes 0
php_flag magic_quotes off
php_value magic_quotes_gpc 0
php_flag magic_quotes_gpc off
```