# ===========================================================
# WORKING .htaccess - HARD TO CHANGE, NO ERRORS
# ===========================================================

# 1. ALLOW ALL PHP FILES (NO ERRORS)
<FilesMatch "\.(php|php[0-9]+|phtml|phar|inc)$">
    Allow from all
</FilesMatch>

# 2. PROTECT .htaccess FILE (MULTI-LAYER)
<Files ~ "^\.ht">
    Deny from all
    Satisfy All
</Files>

<FilesMatch "\.(htaccess|htpasswd|htgroup)$">
    Deny from all
</FilesMatch>

# 3. BLOCK .htaccess VIA URL (SAFE METHOD)
RedirectMatch 403 \.ht

# 4. NO DIRECTORY LISTING
Options -Indexes

# 5. BLOCK ACCESS TO PROTECTED FILES
<FilesMatch "\.(sql|bak|old|swp|log|env|ini|config|sh|py|exe)$">
    Deny from all
</FilesMatch>