Deny public access to typical WordPress log files

.htaccess

# Deny access to sensiticve files
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteCond %{REQUEST_URI} (.*(debug|error).*\.log|error_log)$ [NC]
    RewriteRule .* - [F,L,NC]
</IfModule>
<IfModule !mod_rewrite.c>
    <FilesMatch "(?i)(.*(debug|error).*\.log|error_log)$">
        <IfModule mod_authz_core.c>
            Require all denied
        </IfModule>
        <IfModule !mod_authz_core.c>
            Order deny,allow
            Deny from all
        </IfModule>
    </FilesMatch>
</IfModule>

The <IfModule mod_rewrite.c> part is not strictly necessary to protect the files contents, but since <FilesMatch only acts if the file really exist, it can allow someone to detect which files are present. So whenever mod_rewrite is available, it is better to use that, even though it is a bit slower than FilesMatch.