# Block direct access to settings and helper files
<FilesMatch "^(config|lib)\.php$">
    Require all denied
</FilesMatch>

# Block hidden files and the database folder
<FilesMatch "^\.">
    Require all denied
</FilesMatch>
RedirectMatch 403 ^.*/data/.*$

Options -Indexes
