# ============================================================
# RiskPonse - Uploaded evidence is NOT publicly fetchable
# ============================================================
# Incident photos can deanonymise a reporter. They must only ever be delivered
# by an authenticated handler (media.php), never by guessing a direct URL.
#
# This is defence in depth: Phase 3 moves the upload directory outside the web
# root entirely. Until then - and afterwards, if the directory is ever recreated
# here by mistake - this file denies every request.

<IfModule mod_authz_core.c>
    Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
    Order allow,deny
    Deny from all
</IfModule>

Options -Indexes

# Belt and braces: if the deny above is ever bypassed by a server misconfiguration,
# refuse to execute anything in here as code.
php_flag engine off
