<IfModule mod_rewrite.c>
    RewriteEngine On

    # Prevent directory listing
    Options -Indexes

    # Block sensitive system files from direct web access
    <FilesMatch "\.(env|sqlite|log|sql|md)$">
        Require all denied
    </FilesMatch>

    # Allow direct access to existing files and directories
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d

    # Route all other requests to index.php
    RewriteRule ^(.*)$ index.php [L,QSA]
</IfModule>
