Options -Indexes
Options -MultiViews

RewriteEngine On
RewriteBase /panel/

# Force HTTPS
RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# Protect sensitive files
<FilesMatch "^(config\.php|db\.php|auth\.php)$">
    Order Allow,Deny
    Deny from all
</FilesMatch>

<FilesMatch "\.sql$">
    Order Allow,Deny
    Deny from all
</FilesMatch>

# PHP settings
<IfModule mod_php.c>
    php_flag display_errors Off
    php_flag log_errors On
    php_value upload_max_filesize 10M
    php_value post_max_size 10M
    php_value session.cookie_httponly 1
    php_value session.cookie_path /panel/
</IfModule>

<IfModule mod_php8.c>
    php_flag display_errors Off
    php_flag log_errors On
    php_value upload_max_filesize 10M
    php_value post_max_size 10M
    php_value session.cookie_httponly 1
    php_value session.cookie_path /panel/
</IfModule>
