# Block direct execution/download of PHP source under /app/*
# Clean URLs like /app/dashboard are rewritten by parent .htaccess → index.php
<FilesMatch "\.(php|inc|sql|env|log)$">
    Require all denied
</FilesMatch>

Options -Indexes
