# Rename this file to ".htaccess" and place it INSIDE the /data folder
# on your server. It blocks anyone from opening your ledger files in a
# browser directly. backup.php still reads/writes them normally.

<IfModule mod_authz_core.c>
    Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
    Order allow,deny
    Deny from all
</IfModule>