# DENY ALL DIRECT ACCESS TO JSON DATA FILES
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order allow,deny
Deny from all
</IfModule>
# But allow PHP to read via filesystem
<FilesMatch "\.json$">
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
</FilesMatch>
