# Enforce HTTPS on cPanel Shared Hosting
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# Disable directory browsing
Options -Indexes

# Block direct access to sensitive files
<FilesMatch "\.(sql|env|log|ini|bak)$">
    Require all denied
</FilesMatch>
