.htaccess

# TippingPoint Security Rules - Generated by setup.php
# Protect sensitive files and directories

# Deny access to configuration files
<Files ~ "\.(inc|conf)$">
    Require all denied
</Files>

# Deny access to database files
<Files ~ "\.(db|sqlite|sqlite3)$">
    Require all denied
</Files>

# Deny access to backup files
<Files ~ "\.(bak|backup|old|tmp)$">
    Require all denied
</Files>

# Deny access to log files
<Files ~ "\.(log)$">
    Require all denied
</Files>

# Disable directory browsing
Options -Indexes

# Prevent access to sensitive file patterns
<FilesMatch "(^#.*#|\.(bak|config|dist|fla|inc|ini|log|psd|sh|sql|sw[op])|~)$">
    Require all denied
</FilesMatch>

# Security headers
<IfModule mod_headers.c>
    Header always set X-Content-Type-Options nosniff
    Header always set X-Frame-Options DENY
    Header always set X-XSS-Protection "1; mode=block"
    Header always set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>