# Start ProcessWire:pwbphp (update 17)
# block all PHP files (optional fallback if root .htaccess missing)
<FilesMatch "\.(php|module|inc)$">
  <IfModule mod_authz_core.c>
    Require all denied
  </IfModule>
  <IfModule !mod_authz_core.c>
    Order allow,deny
    Deny from all
  </IfModule>
</FilesMatch>
# End ProcessWire:pwbphp
