# Block direct browser access to files that should only ever be read by submit.php itself.
<FilesMatch "^(config\.php|schema\.sql)$">
    Require all denied
</FilesMatch>
