# Only index.php may be reached from the web. Everything else in this folder (the SQLite
# database, seed.sql, tools.php, config.php) must never be downloadable.
Options -Indexes
<IfModule mod_authz_core.c>
    Require all denied
    <Files "index.php">
        Require all granted
    </Files>
</IfModule>
<IfModule !mod_authz_core.c>
    Order allow,deny
    <Files "index.php">
        Allow from all
    </Files>
</IfModule>
# Some hosts drop the Authorization header before PHP sees it; this passes it through.
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteCond %{HTTP:Authorization} .
    RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
</IfModule>
