finaly I figured out why my apache couldnt start when I anabled rewriteengine.
and with this script it's really doesnt let anyone access files. but as usual there is something else came up.
now video and audio files dont play from the page. mediaplayer plugin cant play files, it sais:
Cannot open. Please verify that the path and filename are correct and try again.
but download button works fine.
P.S. with this .htaccess file peole cant use security software, that disable referal page.