# If the host forces storage/ to live inside the document root, this denies all
# web access to it. Keeping storage outside public_html remains strongly preferred.
Require all denied
<IfModule mod_php.c>
    php_flag engine off
</IfModule>
