diff --git a/QWEN.md b/QWEN.md
index 4703a7b7..5a507b94 100644
--- a/QWEN.md
+++ b/QWEN.md
@@ -191,6 +191,13 @@ DB_DATABASE=testing_db
 DB_USERNAME=root
 DB_PASSWORD=secret
 
+# OpenSID Combined Database (secondary)
+OPENKAB_DB_HOST=127.0.0.1
+OPENKAB_DB_PORT=3 Playwright configuration
+OPENKAB_DB_DATABASE=testing_gabungan_db
+OPENKAB_DB_USERNAME=root
+OPENKAB_DB_PASSWORD=secret
+
 # Map Configuration
 LATTITUDE_MAP=-8.459556
 LONGITUDE_MAP=115.046600
diff --git a/public/.htaccess b/public/.htaccess
index 2106ca4f..49447f19 100644
--- a/public/.htaccess
+++ b/public/.htaccess
@@ -5,6 +5,10 @@
 
     RewriteEngine On
 
+    # Block access to dotfiles (including .env)
+    RewriteCond %{REQUEST_URI} ^/\.env [NC]
+    RewriteRule ^ - [R=404,L]
+
     # Handle Authorization Header
     RewriteCond %{HTTP:Authorization} .
     RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
@@ -29,3 +33,17 @@
     Order Allow,Deny
     Allow from all
 </Files>
+
+# Block direct access to .env and other dotfiles
+<FilesMatch "^\.env">
+    Require all denied
+</FilesMatch>
+
+# Fallback for Apache 2.2
+<IfModule !mod_authz_core.c>
+    <FilesMatch "^\.env">
+        order allow,deny
+        deny from all
+        Satisfy All
+    </FilesMatch>
+</IfModule>