# Safety net: if the whole project is ever uploaded inside the web root by mistake,
# deny everything except the public/ folder.
<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteRule ^(?!public/) - [F,L]
</IfModule>
<IfModule !mod_rewrite.c>
  Require all denied
</IfModule>
