# WEB ICON SOFTWARE - Basic Security

# Protect config directory
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRule ^config/ - [F,L]
    RewriteRule ^includes/ - [F,L]
</IfModule>

# Deny access to sensitive files
<FilesMatch "\.(sql|md|log)$">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Order allow,deny
        Deny from all
    </IfModule>
</FilesMatch>

# Prevent directory listing
Options -Indexes

# PHP settings (if allowed by host)
<IfModule mod_php7.c>
    php_flag display_errors Off
    php_flag log_errors On
</IfModule>
