# Shahbag Phone Organ — root .htaccess
# Blocks direct browser access to config.php, inc/, and dotfiles.

# Block config.php
<Files "config.php">
    Require all denied
</Files>

# Block any file starting with a dot (.htaccess, .git, etc.)
<FilesMatch "^\.">
    Require all denied
</FilesMatch>

# Force UTF-8 on PHP output
AddDefaultCharset UTF-8

# Disable directory listings
Options -Indexes

# Security headers
<IfModule mod_headers.c>
    Header set X-Content-Type-Options "nosniff"
    Header set X-Frame-Options "SAMEORIGIN"
    Header set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>

#----------------------------------------------------------------cp:ppd
# Section managed by cPanel: Password Protected Directories     -cp:ppd
# - Do not edit this section of the htaccess file!              -cp:ppd
#----------------------------------------------------------------cp:ppd
AuthType Basic
AuthName "Shahbag Dashboard"
AuthUserFile "/home/e3670b5/.htpasswds/asifurrahmanofficial.com/Shahbag/passwd"
Require valid-user
#----------------------------------------------------------------cp:ppd
# End section managed by cPanel: Password Protected Directories -cp:ppd
#----------------------------------------------------------------cp:ppd