diff --git a/conf/.htaccess.sample b/conf/.htaccess.sample
index d434f0f..303524b 100644
--- a/conf/.htaccess.sample
+++ b/conf/.htaccess.sample
@@ -5,7 +5,12 @@ RewriteEngine On
 # ======================
 
 # Bloquer l'accès aux fichiers de configuration
-<Files ~ "\.(php|inc|conf|config|local)$">
+<Files ~ "\.(inc|conf|config|local)$">
+    Require all denied
+</Files>
+
+# Bloquer les fichiers PHP dans includes/
+<Files "includes/*.php">
     Require all denied
 </Files>