# Deny direct HTTP access to uploaded evidence files.
# PHP built-in server also blocks /uploads via dev-router.php.
Require all denied
