# Protect configuration file from direct web access.
<Files "config.php">
    Require all denied
</Files>

<IfModule !mod_authz_core.c>
    <Files "config.php">
        Order allow,deny
        Deny from all
    </Files>
</IfModule>
