Options -Indexes
DirectoryIndex index.php
# Protect application configuration, SQL dumps, install markers, and documentation.
<FilesMatch "(?i)^(config\.php|database\.sql|demo-data\.sql|demo-movement\.sql|\.installed|README\.md|CODE-AUDIT\.md|ADMIN-SETUP\.txt|CPANEL-DEPLOYMENT\.md)$">
  Require all denied
</FilesMatch>
# Prevent PHP execution in upload storage (Apache 2.4 / cPanel).
<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteRule ^uploads/.*\.(php[0-9]?|phtml|phar|cgi|pl)$ - [F,NC,L]
</IfModule>
