# SECURITY HARDENING (Phase 1): Protect database files
# Deny access to SQLite files
<Files "*.sqlite">
    Order allow,deny
    Deny from all
</Files>

<Files "*.sqlite-wal">
    Order allow,deny
    Deny from all
</Files>

<Files "*.sqlite-shm">
    Order allow,deny
    Deny from all
</Files>

# Prevent directory listing
Options -Indexes

# Deny access to all files in this directory
Order allow,deny
Deny from all

