# 🔒 ADMIN FOLDER PROTECTION
Options -Indexes

# 1. Block sensitive backend files
<FilesMatch "\.(sql|log|env|json|lock|bak|inc)$">
    Require all denied
</FilesMatch>

# 2. Block direct access to sensitive include files
<Files "db.php">
    Require all denied
</Files>