# Denegar acceso a todos los archivos de log
<RequireAll>
    Require all denied
</RequireAll>

# Prevenir ejecución de scripts
<FilesMatch "\.(php|phtml|php3|php4|php5|pl|py|jsp|asp|sh|cgi)$">
    <RequireAll>
        Require all denied
    </RequireAll>
</FilesMatch>

# Prevenir listado de directorio
Options -Indexes

# Headers de seguridad para logs
<IfModule mod_headers.c>
    Header always set Cache-Control "no-cache, no-store, must-revalidate"
    Header always set Pragma "no-cache"
    Header always set Expires "0"
    Header always set X-Content-Type-Options nosniff
    Header always set X-Frame-Options DENY
</IfModule>