# Pengaturan Keamanan Aplikasi Keuangan Mushola

# Matikan listing direktori
Options -Indexes
Options +FollowSymLinks

# Aktifkan Rewrite Engine
RewriteEngine On

# Blok akses langsung ke file sensitif
<FilesMatch "\.(env|ini|log)$">
    Require all denied
</FilesMatch>

# Blok akses ke file .htaccess
<Files .htaccess>
    Require all denied
</Files>

# Blok akses langsung ke folder config dan includes SAJA
# Folder cetak TIDAK diblok karena perlu diakses untuk print laporan
RewriteRule ^(config|includes)/ - [F,L]

# Security Headers
<IfModule mod_headers.c>
    Header set X-Content-Type-Options "nosniff"
    Header set X-Frame-Options "SAMEORIGIN"
    Header set X-XSS-Protection "1; mode=block"
</IfModule>

# Default page
DirectoryIndex index.php index.html