# php -- BEGIN cPanel-generated handler, do not edit
# Set the “ea-php82” package as the default “PHP” programming language.
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php82 .php .php8 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit


# ==============================
# Bodhuboron ERP Security Lock
# ==============================

Options -Indexes


# Block direct access to sensitive PHP config files
<FilesMatch "^(config|db|database|connection|conn|env|settings|session|response)\.php$">
  <IfModule mod_authz_core.c>
    Require all denied
  </IfModule>

  <IfModule !mod_authz_core.c>
    Order allow,deny
    Deny from all
  </IfModule>
</FilesMatch>


# Block backup/database/log/archive files from browser
<FilesMatch "\.(sql|zip|gz|tar|tgz|bak|backup|old|log|ini|env|sh)$">
  <IfModule mod_authz_core.c>
    Require all denied
  </IfModule>

  <IfModule !mod_authz_core.c>
    Order allow,deny
    Deny from all
  </IfModule>
</FilesMatch>


# Block files ending with _old, _backup, _bak
<FilesMatch "(_old|_backup|_bak)$">
  <IfModule mod_authz_core.c>
    Require all denied
  </IfModule>

  <IfModule !mod_authz_core.c>
    Order allow,deny
    Deny from all
  </IfModule>
</FilesMatch>