<IfModule mod_rewrite.c>
  RewriteEngine On

  # 1. ❌ Deny direct access to the CustomLauncher folder via browser
  RewriteRule ^CustomLauncher/$ - [F]

  # 2. ✅ Allow access to specific scripts and files
  RewriteCond %{REQUEST_URI} ^/CustomLauncher/export_characters\.php$ [OR]
  RewriteCond %{REQUEST_URI} ^/CustomLauncher/donate/check_usdt\.php$ [OR]
  RewriteCond %{REQUEST_URI} ^/CustomLauncher/donate/config\.php$ [OR]
  RewriteCond %{REQUEST_URI} ^/CustomLauncher/AntiCheat/.* [OR]
  RewriteCond %{REQUEST_URI} ^/CustomLauncher/.*\.(png|jpg|webp|json|log|txt|php)$
  RewriteRule ^ - [L]

  # 3. ❌ Deny everything else inside CustomLauncher
  RewriteRule ^CustomLauncher/ - [F]
</IfModule>

  # 4. 🔐 Restrict access to export_characters.php and check_usdt.php by IP
<FilesMatch "^(export_characters|check_usdt)\.php$">
  Order Deny,Allow
  Deny from all
  Allow from 148.113.207.80
</FilesMatch>

  # 5. 🔒 Completely deny access to donate/config.php
<Files "config.php">
  Order allow,deny
  Deny from all
</Files>
