Options -Indexes

<IfModule mod_rewrite.c>
    RewriteEngine On
    
    # Allow access to PHP files
    RewriteCond %{REQUEST_FILENAME} -f
    RewriteRule ^ - [L]
    
    # Block direct access to storage
    RewriteRule ^storage/ - [F,L]
    
    # Block direct access to uploads/confidential
    RewriteRule ^uploads/confidential/ - [F,L]
</IfModule>