<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule ^ index.php [L]
</IfModule>

# Block direct access to sensitive extensions
<FilesMatch "\.(sql|log|lock|md)$">
    Require all denied
</FilesMatch>
