# Dusk Roleplay Forums — LiteSpeed compatible

Options -Indexes

# Block direct access to sensitive files
<Files "config.php">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Order allow,deny
        Deny from all
    </IfModule>
</Files>
<Files "reseed.php">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Order allow,deny
        Deny from all
    </IfModule>
</Files>
<Files "diag.php">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Order allow,deny
        Deny from all
    </IfModule>
</Files>

RewriteEngine On
RewriteBase /forum/

# Explicitly allow PHP files to execute normally — do NOT rewrite them
RewriteRule ^api\.php - [L]
RewriteRule ^test\.php - [L]
RewriteRule ^diag\.php - [L]
RewriteRule ^reseed\.php - [L]

# Allow direct file/directory access
RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^ - [L]

# SPA fallback
RewriteRule ^ index.html [L]

<IfModule mod_headers.c>
    Header always set X-Content-Type-Options "nosniff"
    Header always set X-Frame-Options "SAMEORIGIN"
</IfModule>
