# Prevent directory listing
Options -Indexes

# Security: block direct access to data directory
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule ^data/ - [F,L]
</IfModule>