# Second lock on the admin tools, independent of the admin_key in config.php.
# Uncomment after creating a password file via
#   cPanel -> Directory Privacy  (or)  htpasswd -c /home/<user>/private/.htpasswd admin
#
# AuthType Basic
# AuthName "IRON admin"
# AuthUserFile /home/CPANEL_USER/private/.htpasswd
# Require valid-user

# Never serve a CSV or SQL file that happens to land in here.
<FilesMatch "\.(csv|sql|log|bak|ini)$">
  Require all denied
  <IfModule !mod_authz_core.c>
    Deny from all
  </IfModule>
</FilesMatch>
