diff --git a/webapp/.htaccess b/webapp/.htaccess
new file mode 100644
index 0000000..93fea91
--- /dev/null
+++ b/webapp/.htaccess
@@ -0,0 +1,11 @@
+# Protect sensitive files from direct web access
+<FilesMatch "\.(log|sql|env)$">
+    Order Allow,Deny
+    Deny from all
+</FilesMatch>
+
+# Protect error.log specifically
+<Files "error.log">
+    Order Allow,Deny
+    Deny from all
+</Files>
diff --git a/webapp/config.php b/webapp/config.php
index aeef744..07435fa 100644
--- a/webapp/config.php
+++ b/webapp/config.php
@@ -7,6 +7,11 @@
 error_reporting(E_ALL);
 ini_set('display_errors', '0');
 
+// Configure error logging to local file
+$errorLogPath = __DIR__ . '/error.log';
+ini_set('log_errors', '1');
+ini_set('error_log', $errorLogPath);
+
 // Database configuration
 define('DB_HOST', getenv('DB_HOST') ?: 'localhost');
 define('DB_NAME', getenv('DB_NAME') ?: 'geofeed_manager');
diff --git a/webapp/error.log b/webapp/error.log
new file mode 100644
index 0000000..766f0c4
--- /dev/null
+++ b/webapp/error.log
@@ -0,0 +1,2 @@
+# PHP Error Log for Geofeed Manager
+# Created at 2025-01-17