# Protect database folder from direct web access
     # Created: 2025-12-26
     # Purpose: Prevent unauthorized execution of migration/setup scripts

     <IfModule mod_authz_core.c>
         # Apache 2.4+
         Require all denied
     </IfModule>

     <IfModule !mod_authz_core.c>
         # Apache 2.2
         Order Deny,Allow
         Deny from all
     </IfModule>

     # Allow viewing SQL schema files (read-only)
     <FilesMatch "\.(sql)$">
         <IfModule mod_authz_core.c>
             Require all granted
         </IfModule>
         <IfModule !mod_authz_core.c>
             Order Allow,Deny
             Allow from all
         </IfModule>
     </FilesMatch>