# This .htaccess sits at the project root (public_html/demo.abhax.com/epaper2/)
# It blocks all direct access to everything except the public/ folder.
# Your cPanel domain/subdomain document root should ideally point directly
# at the public/ folder - see SETUP.md. This file is a safety net in case
# it doesn't (e.g. installed inside an existing docroot).

RewriteEngine On
RewriteCond %{REQUEST_URI} !^/public/
RewriteRule ^(app|config|database|storage)/ - [F,L]

<IfModule mod_authz_core.c>
    Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
    Order allow,deny
    Deny from all
</IfModule>
