Options -Indexes
DirectoryIndex index.php

# Protect common sensitive files on shared hosting / InfinityFree.
<FilesMatch "(^|/)(\.env|\.git|.*\.(sql|ini|log|bak|old|zip))$">
  Require all denied
</FilesMatch>

# Never expose PHP source from upload folders.
<IfModule mod_headers.c>
  Header always set X-Content-Type-Options "nosniff"
  Header always set X-Frame-Options "SAMEORIGIN"
  Header always set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>
