# DexProtectX PHP Folder Security
# Prevent direct access to sensitive PHP files

# Block direct browser access to backend scripts
<FilesMatch "^(worker|heartbeat|db|points|fonts)\.php$">
    Order deny,allow
    Deny from all
</FilesMatch>

# Allow only bot.php (webhook), owner_panel.php, setup_webhook.php
<FilesMatch "^(bot|owner_panel|setup_webhook)\.php$">
    Order allow,deny
    Allow from all
</FilesMatch>

# Prevent directory listing
Options -Indexes

# Protect temp folder
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRule ^temp/.*$ - [F,L]
    RewriteRule ^fonts/.*\.php$ - [F,L]
</IfModule>
