# SynaptikCMS Form Builder Plugin — access control
# Public entry point: formbuilder-submit.php (form POST).
# Everything else (data layer, mail, PDF generator, security, includes) must
# never be requested directly — they are only ever include()'d by the entry
# points above or by admin/ scripts behind the core admin session.

<FilesMatch "^(formbuilder-data-layer|formbuilder-functions|formbuilder-pdf|formbuilder-mail|formbuilder-security|formbuilder-shortcode|formbuilder-init|formbuilder-i18n)\.php$">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Deny from all
    </IfModule>
</FilesMatch>

<FilesMatch "\.json$">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Deny from all
    </IfModule>
</FilesMatch>
