# Editor.bg Bridge hardening (Apache)

# 1) Block direct access to local config
<Files "bridge.local.php">
  Require all denied
</Files>

# 2) (Recommended) After successful setup, delete install.php.
# If you keep it, block it:
# <Files "install.php">
#   Require all denied
# </Files>

# 3) JSON only
<IfModule mod_headers.c>
  Header set X-Content-Type-Options "nosniff"
</IfModule>
