This is what I have. How is it supposed to be set up?
For wp-includes:
Order Allow,Deny
Deny from all
<Files ~ ".(css|jpe?g|png|gif|js)$">
<Files ~ ".(/themes/)$">
Allow from all
</Files>
For wp-content:
Order Allow,Deny
Deny from all
<Files ~ "\.(css|jpe?g|png|gif|js)$">
Allow from all
</Files>
<Files ~ ".(/themes/)$">
Allow from all
</Files>
So it works with plugins, thats the issue I had.