# 🚫 Disable directory listing
Options -Indexes

# 🚫 Block PHP execution
<FilesMatch "\.(php|php5|phtml|phar)$">
    Deny from all
</FilesMatch>

# ✅ Allow only static files
<FilesMatch "\.(css|js|png|jpg|jpeg|gif|svg|webp|woff|woff2|ttf|eot)$">
    Require all granted
</FilesMatch>