From 444c94c898ec32aa8f66e64ec6ec0008b89991a6 Mon Sep 17 00:00:00 2001
From: Michael Staake <michael@staake.ai>
Date: Sat, 27 Dec 2025 12:36:35 -0800
Subject: [PATCH] Security improvement - disallow direct access to download DB

---
 example.htaccess | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/example.htaccess b/example.htaccess
index c8fd1a9..bf70149 100644
--- a/example.htaccess
+++ b/example.htaccess
@@ -2,6 +2,9 @@ RewriteEngine On
 #if this is in a folder, edit this. example.com/mainty/ would be /mainty/
 RewriteBase /
 
+# Block access to data directory
+RewriteRule ^data/ - [F,L]
+
 # Redirect to HTTPS (optional, uncomment if needed)
 # RewriteCond %{HTTPS} off
 # RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]