# php -- BEGIN cPanel-generated handler, do not edit
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php82 .php .php8 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit

# ================= SECURITY START =================

# Disable directory listing
Options -Indexes

# Protect sensitive files
<FilesMatch "(db\.php|config\.php|\.env|error_log|composer\.json|composer\.lock)">
    Order allow,deny
    Deny from all
</FilesMatch>

# Block access to hidden files (.htaccess, .git, etc)
<Files ~ "^\.">
    Order allow,deny
    Deny from all
</Files>

# Block direct access to includes (if exists)
<IfModule mod_authz_core.c>
    <Directory "includes">
        Require all denied
    </Directory>
</IfModule>

# Prevent execution of PHP inside uploads folder
<Directory "uploads">
    <FilesMatch "\.(php|phtml|php5|phar)$">
        Require all denied
    </FilesMatch>
</Directory>

# Allow only safe file types
<FilesMatch "\.(php|css|js|png|jpg|jpeg|gif|svg|ico)$">
    Require all granted
</FilesMatch>

# ================= SECURITY END =================