# Block direct web access to config and includes (Apache hosts / cPanel)
RedirectMatch 403 ^/(config|includes|database|cron)/
<FilesMatch "\.(sql|md)$">
    Require all denied
</FilesMatch>
