# =============================================================================
# SECURITY CONFIGURATION FOR INCLUDES FOLDER
# =============================================================================
# Purpose: Protect sensitive PHP files from direct browser access
# This prevents users from accessing configuration files directly
# =============================================================================

# Deny all direct access to files in this directory
Order deny,allow
Deny from all

# Allow PHP to include these files (internal server access)
# This works because PHP includes happen at server level, not browser level
<FilesMatch "\.(php)$">
    Order allow,deny
    Deny from all
</FilesMatch>

# Disable directory browsing
Options -Indexes

# Prevent access to .htaccess itself
<Files .htaccess>
    Order allow,deny
    Deny from all
</Files>
