# CaseDesk - Simple Security
Options -Indexes

# Prevent direct access to config and sensitive files
<FilesMatch "^(config\.php|\.pw_hash)$">
    Order allow,deny
    Deny from all
</FilesMatch>

# PHP settings
<IfModule mod_php.c>
    php_value upload_max_filesize 20M
    php_value post_max_size 25M
    php_value max_execution_time 60
    php_value session.cookie_httponly 1
    php_value session.use_strict_mode 1
</IfModule>