Options -Indexes
DirectoryIndex index.php

<IfModule mod_rewrite.c>
    RewriteEngine On
    # Protect uploads directory - no PHP execution
    RewriteRule ^uploads/.*\.php$ - [F,L]
</IfModule>

# Protect sensitive files
<FilesMatch "(config\.php|\.sql|\.env)$">
    Order allow,deny
    Deny from all
</FilesMatch>
