# Blocks direct web access to this folder — already proven to work on your
# host (this exact rule was confirmed returning 403 in earlier testing).
<IfModule mod_authz_core.c>
  Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
  Order deny,allow
  Deny from all
</IfModule>
