Try to prevent direct access data leaks. Add this line of code after the opening PHP tag in each PHP file.

if ( ! defined( 'ABSPATH' ) ) {
    exit; // Exit if accessed directly
}