diff --git a/databases/epic_epic_db.sql.gz b/databases/epic_epic_db.sql.gz
index 93ffd9e..55a12b1 100644
Binary files a/databases/epic_epic_db.sql.gz and b/databases/epic_epic_db.sql.gz differ
diff --git a/databases/epic_parkersling.sql.gz b/databases/epic_parkersling.sql.gz
index 61223cd..7494590 100644
Binary files a/databases/epic_parkersling.sql.gz and b/databases/epic_parkersling.sql.gz differ
diff --git a/databases/park_slingshot.sql.gz b/databases/park_slingshot.sql.gz
index 57f2468..91e908a 100644
Binary files a/databases/park_slingshot.sql.gz and b/databases/park_slingshot.sql.gz differ
diff --git a/databases/toms_tjj_db.sql.gz b/databases/toms_tjj_db.sql.gz
index 9feb078..09244f9 100644
Binary files a/databases/toms_tjj_db.sql.gz and b/databases/toms_tjj_db.sql.gz differ
diff --git a/databases/tomt_ttg_db.sql.gz b/databases/tomt_ttg_db.sql.gz
index 7380736..8ef7fcf 100644
Binary files a/databases/tomt_ttg_db.sql.gz and b/databases/tomt_ttg_db.sql.gz differ
diff --git a/databases/workt_track_db.sql.gz b/databases/workt_track_db.sql.gz
index 3068318..08f7d62 100644
Binary files a/databases/workt_track_db.sql.gz and b/databases/workt_track_db.sql.gz differ
diff --git a/ols-vhosts/parkerslingshotrentals.com/vhost.conf b/ols-vhosts/parkerslingshotrentals.com/vhost.conf
index 10fb647..6cb8363 100755
--- a/ols-vhosts/parkerslingshotrentals.com/vhost.conf
+++ b/ols-vhosts/parkerslingshotrentals.com/vhost.conf
@@ -89,3 +89,17 @@ vhssl  {
   enableStapling           1
   ocspRespMaxAge           86400
 }
+
+context / {
+  location                $DOC_ROOT/
+  allowBrowse             1
+  authName                Coming Soon
+  realm                   ComingSoonRealm
+  indexFiles              index.php, index.html
+}
+
+realm ComingSoonRealm {
+  userDB {
+    location                /home/parkerslingshotrentals.com/.htpasswd
+  }
+}
diff --git a/ols-vhosts/site-list.txt b/ols-vhosts/site-list.txt
index c85c644..fe2a4dd 100644
--- a/ols-vhosts/site-list.txt
+++ b/ols-vhosts/site-list.txt
@@ -1,9 +1,9 @@
-# Websites on DO server — 2026-07-12
+# Websites on DO server — 2026-07-19
 
 - epictravelexpeditions.com  (3.8M)
 - orbishosting.com  (113M)
 - orbis.orbishosting.com  (40K)
-- parkerslingshotrentals.com  (300K)
+- parkerslingshotrentals.com  (304K)
 - tomsjavajive.com  (3.9M)
 - tomtomgames.com  (868K)
 - worktracking.orbishosting.com  (124K)
diff --git a/sites/parkerslingshotrentals.com/public_html/.htaccess.bak-20260717 b/sites/parkerslingshotrentals.com/public_html/.htaccess.bak-20260717
new file mode 100644
index 0000000..29f81da
--- /dev/null
+++ b/sites/parkerslingshotrentals.com/public_html/.htaccess.bak-20260717
@@ -0,0 +1,21 @@
+<Files db.php>
+  Order deny,allow
+  Deny from all
+</Files>
+
+RewriteEngine On
+RewriteRule ^db\.php$ - [F,L]
+RewriteCond %{REQUEST_URI} ^/db\.php$
+RewriteRule .* - [F,L]
+
+# .git/ was found directly downloadable (leaked GitHub PAT) - same class of
+# issue found and fixed on sibling sites this session.
+RewriteCond %{REQUEST_URI} ^/\.git
+RewriteRule .* - [F,L]
+
+# uploads/ (customer license/insurance docs) must never be directly downloadable -
+# same Order/Deny-doesn't-work-on-OpenLiteSpeed gotcha as .git above. Docs are
+# served only through view-doc.php / admin/view-doc.php, which read by filesystem
+# path via readfile() - blocking direct URL access here doesn't break that flow.
+RewriteCond %{REQUEST_URI} ^/uploads/
+RewriteRule .* - [F,L]