# Keamanan: cegah file PHP dieksekusi di dalam folder upload,
# meskipun sistem hanya menerima upload PDF (validasi MIME di uploadPdf()).
<IfModule mod_php.c>
    php_flag engine off
</IfModule>
<FilesMatch "\.(php|phtml|php\d)$">
    Require all denied
</FilesMatch>
