# ENU-SCMIS - Apache hardening (works on XAMPP and most shared hosts)
Options -Indexes
DirectoryIndex index.php

<IfModule mod_headers.c>
  Header always set X-Frame-Options "DENY"
  Header always set X-Content-Type-Options "nosniff"
</IfModule>

# never expose internal folders / files
<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteRule ^(config|includes|modules|storage|cron)(/|$) - [F,L]
  RewriteRule ^install/schema\.sql$ - [F,L]
</IfModule>
<FilesMatch "\.(sql|log|bak|md|inc|lock)$">
  Require all denied
</FilesMatch>

<IfModule mod_php.c>
  php_flag display_errors off
  php_value upload_max_filesize 12M
  php_value post_max_size 14M
</IfModule>
<IfModule mod_php8.c>
  php_flag display_errors off
  php_value upload_max_filesize 12M
  php_value post_max_size 14M
</IfModule>
