# Protect the data directory from direct web access
<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteRule ^data/ - [F,L]
</IfModule>

# Deny direct access to .db files anywhere
<FilesMatch "\.db$">
  Order Allow,Deny
  Deny from all
</FilesMatch>
