Options -Indexes
ServerSignature Off

# Never expose source/config/secrets, archives, dumps or VCS metadata.
<FilesMatch "(^|/)(\.env|\.git|\.gitignore|composer\.(json|lock)|package(-lock)?\.json|.*\.(sql|sqlite|sqlite3|bak|backup|old|orig|log|ini|conf|config|dist|zip|tar|gz))$">
    Require all denied
</FilesMatch>

# Block common sensitive filenames anywhere under this directory.
<FilesMatch "^(database(_production)?\.php|mailer\.php)$">
    Require all denied
</FilesMatch>

# Prevent MIME sniffing and framing.
<IfModule mod_headers.c>
    Header always set X-Content-Type-Options "nosniff"
    Header always set X-Frame-Options "SAMEORIGIN"
    Header always set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>

# php -- BEGIN cPanel-generated handler, do not edit
# Set the “ea-php83” package as the default “PHP” programming language.
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php83 .php .php8 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit
