<Files ~ "\.log$">
  deny from all
</Files>
<Files ~ "\.dat$">
  deny from all
</Files>