# Deny direct access to plugin files
<Files *.php>
    Order Allow,Deny
    Deny from all
</Files>

# Allow WordPress admin access
<FilesMatch "^(admin-ajax|admin-post)\.php$">
    Order Allow,Deny
    Allow from all
</FilesMatch>
