<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /invgen/
    
    # Force HTTPS
    RewriteCond %{HTTPS} off
    RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
    
    # Protect sensitive files
    <FilesMatch "^(config\.php|\.htaccess|install\.php|test_.*\.php|check_setup\.php)$">
        Order allow,deny
        Deny from all
    </FilesMatch>
    
    # Protect data folder
    RewriteRule ^data/ - [F,L]
    
    # Prevent directory listing
    Options -Indexes
    
    <IfModule mod_headers.c>
        Header set X-Content-Type-Options "nosniff"
        Header set X-Frame-Options "SAMEORIGIN"
        Header set X-XSS-Protection "1; mode=block"
        Header set Strict-Transport-Security "max-age=31536000; includeSubDomains" env=HTTPS
    </IfModule>
</IfModule>

Options -Indexes

<IfModule mod_headers.c>
    Header unset X-Powered-By
</IfModule>
