# Explicitly ALLOW everything in and under this folder. This exists to
# override any restrictive default set at the server/vhost level (some hosts
# set "deny by default" on <Directory> blocks outside the webroot, or on
# folders that look like control panels). It does not weaken security —
# admin/includes/config.php still requires a valid admin session
# (requireAdmin()) before any admin page renders.

<IfModule mod_authz_core.c>
    Require all granted
</IfModule>
<IfModule !mod_authz_core.c>
    Order allow,deny
    Allow from all
</IfModule>

DirectoryIndex index.php
Options +FollowSymLinks -Indexes

<IfModule mod_php7.c>
    php_flag engine on
</IfModule>
<IfModule mod_php8.c>
    php_flag engine on
</IfModule>
