OK here is the .htaccess file that I added the two blocks of text to from the package. My store is in the root, my .htaccess is in the root.
Code:
DirectoryIndex index.html index.php
#####
# The following rules should be added
# to the TOP of your existing .htaccess file
# to prevent malicious users/bots from accessing
# x-cart files that aren't meant to be public.
#####
# block all smarty templates (no reason to have these exposed)
RedirectMatch gone ^/.*\.tpl$
# block all .log (log files), .sql (sql dump/export) and .conf (config files) files
# in case some day these files move to another directory
RedirectMatch gone ^.*\.(sql|log|conf)$
# block access to the 'Smarty-*' directory
RedirectMatch gone ^.*Smarty.*$
# block common X-Cart files that could reveal
# that you have X-Cart installed
RedirectMatch gone VERSION.*
RedirectMatch gone COPYRIGHT.*
RedirectMatch gone INSTALL.*
RedirectMatch gone NEW.*
RedirectMatch gone README.*
RedirectMatch gone UPGRADE.*
# block access to /upgrade
Redirect gone /upgrade
# block access to /skin1_original
Redirect gone /skin1_original
# block access to the /sql directory
Redirect gone /sql
# block access to the /shipping directory
Redirect gone /shipping
# block access to the pgp directories
Redirect gone /.pgp
Redirect gone /.pgp.def
# block access to the pgp directories
Redirect gone /tmp
Redirect gone /var
Options +FollowSymLinks
# Some servers require the Rewritebase directive to be
# enabled (remove '#' at the beginning to activate)
# Please note: when enabled, you must include the path
# to your root xcart folder (i.e. RewriteBase /shop)
#RewriteBase /
# Enable the following 3 lines if you want to make sure
# all users use the www. version of your domain.
# Helps prevent cookie issues for some X-Cart installations
# RewriteCond %{HTTPS} off
# RewriteCond %{HTTP_HOST} ^YOURDOMAIN.com [NC]
# RewriteRule ^(.*)$ http://www.YOURDOMAIN.com/$1 [R=301,L]
##### XC SEO Lite
# Rewrite SEO category URL's
# Rewrite SEO manufacturers URL's
# Rewrite SEO product URL's
# Rewrite SEO static page URL's
# Rewrite SEO search URL's
##### / XC SEO Lite
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^http://economedical.com.au/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://economedical.com.au$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.economedical.com.au/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.economedical.com.au$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.rgmedicalnsw.com.au/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.rgmedicalnsw.com.au$ [NC]
RewriteRule .*\.([^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/[^/]*/)$ - [F,NC]
__________________
x-cart 4.6.4 RB3 (mystethoscopeshop.com(.au))
x-cart 4.5.0 (4.6.4 RB3 in dev) (economedical.com.au)
ReBoot V3 (great xcartmod)
Big ups to bcsengineering.com great mods excellent support. Also shout out to xcartmods.co.uk, Firetank and alteredcart.com easy add ons for x-cart makes stores look great with minimal fuss.