How to secure wordpress core files in wp-includes/wp-admin from direct access

Hi,
I am using wordpress multisite, I need help in securing wordpress core files residing in wp-includes/wp-admin and any direct file access in wp-content, I have checke out some plugins like prevent direct access and prevent file access, but they are of no use and only prevent files access inside uploads, i specifically need to prevent the core files from hackers and bots, Please help regarding it either specify some free plugin which can help or any htaccess rules which can block wp-includes files from direct access only because wp-includes js files are included on frontend of site, or any rule which can only prevent the php files inside the wordpress core folders and will not affect any other functionality of wordpress if i allow the htaccess rules for blocking direct access, Please help.

• This topic was modified 4 years, 9 months ago by Yui. Reason: moved to networking wordpress (multisite)

The page I need help with: [log in to see the link]