# Partials included by front-controller PHP files — not meant to be
# requested directly (they assume $pdo/session/etc. are already set up
# and would emit broken/undefined-variable output or notices if hit raw).
Require all denied

<IfModule !mod_authz_core.c>
  Order deny,allow
  Deny from all
</IfModule>
