# Block direct access to uploaded files (except logos)
# Note: uploads/logos/.htaccess overrides this for logo images

# Apache 2.2
<IfModule !mod_authz_core.c>
    Deny from all
</IfModule>

# Apache 2.4 (XAMPP default)
<IfModule mod_authz_core.c>
    Require all denied
</IfModule>
