# Protect sensitive files
<Files "config.php">
    Require all denied
</Files>
<FilesMatch "\.(log|json)$">
    Require all denied
</FilesMatch>

# Deny access to includes and handlers directly
RewriteEngine On
RewriteRule ^(includes|handlers|storage|logs)/ - [F,L]
