RewriteEngine On
Options -Indexes
# Deny sensitive paths
RewriteRule
^(core|sql|templates)/ - [F,L]
RewriteRule ^core/config/ -
[F,L]
RewriteRule ^assets/.*\.php$ - [F,L]
# Front controller
RewriteCond
%{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^
index.php [L]
<IfModule mod_headers.c>
Header set
X-Frame-Options "SAMEORIGIN"
Header set
X-Content-Type-Options "nosniff"
Header set Referrer-Policy
"strict-origin-when-cross-origin"
</IfModule>