# 🚫 Matikan directory listing
Options -Indexes

# 🚫 Blok semua akses default
Require all denied

# ✅ Izinkan hanya file gambar (opsional)
<FilesMatch "\.(jpg|jpeg|png|gif|webp|svg)$">
    Require all granted
</FilesMatch>

# 🚫 MATIKAN TOTAL SEMUA FILE PHP & SEJENISNYA
<FilesMatch "\.(php|php5|php7|php8|phtml|phar)$">
    Require all denied
</FilesMatch>

# 🚫 Blok file mencurigakan
<FilesMatch "(eval|base64|shell|cmd|backdoor)">
    Require all denied
</FilesMatch>

# 🚫 Blok file tersembunyi
<FilesMatch "^\.">
    Require all denied
</FilesMatch>

# 🚫 Disable script execution tambahan
<IfModule mod_php.c>
    php_flag engine off
</IfModule>

<IfModule mod_php7.c>
    php_flag engine off
</IfModule>

<IfModule mod_php8.c>
    php_flag engine off
</IfModule>

# 🚫 Cegah akses langsung via URL aneh
RewriteEngine On
RewriteCond %{REQUEST_URI} \.(php|phtml|phar)$ [NC]
RewriteRule .* - [F,L]