diff --git a/.htaccess b/.htaccess
index c5f7ad8cd..db440e756 100644
--- a/.htaccess
+++ b/.htaccess
@@ -1,9 +1,9 @@
-<Files *.php>
+<FilesMatch "\.(php|php3|php4|php5|phtml|inc)$">
 	Deny from all
-</Files>
-<Files static-main.php>
+</FilesMatch>
+<FilesMatch "(main|static-main|rpc)\.php$">
 	Allow from all
-</Files>
-<Files main.php>
-	Allow from all
-</Files>
+</FilesMatch>
+<FilesMatch "silverstripe_version$">
+	Deny from all
+</FilesMatch>
\ No newline at end of file
diff --git a/web.config b/web.config
new file mode 100644
index 000000000..0e3d0aad2
--- /dev/null
+++ b/web.config
@@ -0,0 +1,11 @@
+<configuration>
+	<system.webServer>
+		<security>
+			<requestFiltering>
+				<hiddenSegments>
+					<add segment="silverstripe_version" />
+				</hiddenSegments>
+			</requestFiltering>
+		</security>
+	</system.webServer>
+</configuration>
\ No newline at end of file