# ═══ TrackPad — backend secret, no directory listing ═══
Options -Indexes

# config.php + lib.php sirf server-side include hote hain — web se direct NAHI khul sakte
<FilesMatch "^(config|lib)\.php$">
  Require all denied
</FilesMatch>

# koi data / log / json / txt file web se na khule (secrets safe)
<FilesMatch "\.(json|log|txt|md|bak|sql|ini)$">
  Require all denied
</FilesMatch>
