RewriteEngine on
RewriteBase /widget4k

# disallow .php and .cgi direct loading
RewriteCond %{THE_REQUEST} "^\S* .*?\.(php|cgi)[? ].*$"
RewriteRule .* - [L,F]

# main conversions
RewriteRule ^(rules|login)/?$ $1.php [L]
RewriteRule ^(upload)(\.xml)?$ $1.php [L]

RewriteRule ^gallery(/?)$ gallery.cgi [L]
RewriteRule ^gallery\.xml$ gallery.cgi?xml=1 [L]
RewriteRule ^gallery/(page|widget)(\d+)(/?)$ gallery.cgi?$1=$2 [L]
RewriteRule ^gallery/(page|widget)(\d+)\.xml$ gallery.cgi?$1=$2&xml=1 [L]