# Protect sensitive files
<FilesMatch "\.(db|log|json)$">
    Order allow,deny
    Deny from all
</FilesMatch>

# Allow webhook.php to be accessed
<Files "webhook.php">
    Order allow,deny
    Allow from all
</Files>

# Protect config file
<Files "config.php">
    Order allow,deny
    Deny from all
</Files>

# Disable directory listing
Options -Indexes

# Enable error handling
php_flag display_errors Off
php_flag log_errors On

