# Block all direct web access to this folder — config.php, schema.sql,
# and other includes should only ever be loaded by PHP, never fetched
# directly by a browser.
<IfModule mod_authz_core.c>
    Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
    Order allow,deny
    Deny from all
</IfModule>
