wordpress+awstats htaccess problem

Following various advices I created this .htaccess:

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_URI} ^/(stats|awstats|failed_auth\.html)/?(.*)$ [NC]
RewriteRule ^.*$ - [L]
</IfModule>
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress

Code (markup):

The problem is that awstats doesn't load any icon at all. if I try to read them directly with Firefox, I can see the directory, but if I click on a jpb, I got directed back to my blog. I don't understand why, I thought that

/?(.*)$ 

Code (markup):

this part was made to see any file/directory after /awstats/

Thanks for reading (and replying )

 

But

RewriteRule ^.*$ - [L]

Code (markup):

denies all access.

 

Yes, but how do you express with the first condition

RewriteCond %{REQUEST_URI} ^/(stats|awstats|failed_auth\.html)/?(.*)$ [NC]

Code (markup):

That everything after stats and awstats should be made available?
Isn't that ?(.*) ?

 

You take them out:

RewriteCond %{REQUEST_URI} ^/(failed_auth\.html)/?(.*)$ [NC]

Code (markup):

The '(', ')' and '?(.*)' may not be necessary anymore.

Your current rules says to block everything following /stats/ /awstats/ and /failed_auth.html/

 

Well..now I have the following rule(s) on another htaccess file.
The former I wrote is on the root; this one is inside awstat

AuthType Basic
AuthUserFile /home/uuuu/xxxxxxx/.htpasswd
AuthName "Stat area"
require valid-user
RewriteEngine  on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^https?://(aaaa\.)?bbbbb.com/?.*$ [NC]
RewriteRule \.(gif|jpg|jpeg|png|mp3|mpg|avi|mov)$ - [F,NC]
DirectoryIndex uu.html

Code (markup):

And I see images. So I think I solved it. But I still don't really get why