# Blocks all direct web access to this folder's files (e.g. users.json),
# on any Apache version. Apache 2.4+ understands "Require all denied";
# older 2.2-style hosts need the "Order/Deny" syntax instead - including
# both means this works correctly no matter which one a customer's host
# happens to be running, rather than silently doing nothing on the one it
# doesn't recognize.
#
# NOTE: this file only has any effect on Apache. It does nothing at all on
# Nginx, which never reads .htaccess files - an Nginx host needs an
# equivalent rule added directly to its own server configuration instead
# (ask the host's support to block public access to this folder).
<IfModule mod_authz_core.c>
    Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
    Order deny,allow
    Deny from all
</IfModule>
