diff --git a/.htaccess b/.htaccess
index 94e0316652..12949c7117 100644
--- a/.htaccess
+++ b/.htaccess
@@ -1,4 +1,4 @@
-<FilesMatch "\.(htaccess|htpasswd|ini|log|sh|inc|bak|sql|neon|DS_Store)$">
+<FilesMatch "\.(htaccess|htpasswd|ini|log|sh|inc|bak|sql|neon|DS_Store|lock|json|yml|neon)$">
   Order Allow,Deny
   Deny from all
 </FilesMatch>
diff --git a/CHANGELOG.txt b/CHANGELOG.txt
index 85357ff180..342dc2b122 100644
--- a/CHANGELOG.txt
+++ b/CHANGELOG.txt
@@ -25,8 +25,10 @@ v25.0.01
         System: raised the minimum MySQL version to 5.7
 
     Security
+        System: added .lock and .json files to htaccess denied list
 
     Bug Fixes
+    
 
 v25.0.00
 --------