# Protect installer internals on Apache / cPanel
Options -Indexes

<IfModule mod_rewrite.c>
  RewriteEngine On
  # Deny direct access to PHP libraries, SQL dumps, lock file
  RewriteRule ^lib/ - [F,L]
  RewriteRule ^sql/ - [F,L]
  RewriteRule ^\.installed$ - [F,L]
  RewriteRule ^cli\.php$ - [F,L]
</IfModule>

# Extra belt-and-suspenders for common Apache configs
<FilesMatch "^(cli\.php|\.installed)$">
  Require all denied
</FilesMatch>

<IfModule mod_authz_core.c>
  <DirectoryMatch "^.*/installer/(lib|sql)">
    Require all denied
  </DirectoryMatch>
</IfModule>
