# ---------------------------------------------------------------------------
# Nothing in app/ should ever be fetched over the web - it holds config.php
# with your database and mailbox passwords in it.
#
# If public/ is your document root this file is never reached and costs
# nothing. It matters when the whole folder had to go inside public_html.
# ---------------------------------------------------------------------------

# Apache 2.4
<IfModule mod_authz_core.c>
  Require all denied
</IfModule>

# Apache 2.2
<IfModule !mod_authz_core.c>
  Order deny,allow
  Deny from all
</IfModule>
