<IfModule mod_rewrite.c>
    RewriteEngine On

    # Disable directory browsing
    Options -Indexes

    # Block access to sensitive folders
    RewriteRule ^(app|config|storage|vendor|database)/ - [F,L]

    # Redirect everything to public
    RewriteCond %{REQUEST_URI} !^/public/
    RewriteRule ^(.*)$ public/$1 [L]
</IfModule>
