# ============================================================
# SISMABA — Keamanan Deployment
# ============================================================
# Blokir akses langsung lewat browser ke file database/backup/log/konfigurasi sensitif yang
# mungkin ada di folder aplikasi (mis. dump .sql, error_log). TIDAK memengaruhi akses normal ke
# index.php, profil.php, logout.php, modules/, assets/, atau api/ — semuanya tetap bisa diakses
# apa adanya, di root domain maupun di subfolder (mis. /simba/).

<IfModule mod_authz_core.c>
    # Apache 2.4+
    <FilesMatch "\.(sql|sqlite|sqlite3|db|bak|backup|old|zip|tar|gz|rar|7z|env|log)$">
        Require all denied
    </FilesMatch>
    <FilesMatch "^(error_log|php_errorlog|debug\.log)$">
        Require all denied
    </FilesMatch>
</IfModule>
<IfModule !mod_authz_core.c>
    # Apache 2.2 (fallback, hosting lama)
    <FilesMatch "\.(sql|sqlite|sqlite3|db|bak|backup|old|zip|tar|gz|rar|7z|env|log)$">
        Order allow,deny
        Deny from all
    </FilesMatch>
    <FilesMatch "^(error_log|php_errorlog|debug\.log)$">
        Order allow,deny
        Deny from all
    </FilesMatch>
</IfModule>

# Jangan tampilkan isi folder (directory listing) untuk folder tanpa index.php di dalamnya.
Options -Indexes
