Options -Indexes
DirectoryIndex index.php
RewriteEngine On

<IfModule mod_headers.c>
Header always set X-Frame-Options "SAMEORIGIN"
Header always set X-Content-Type-Options "nosniff"
Header always set Referrer-Policy "strict-origin-when-cross-origin"
Header always set Permissions-Policy "geolocation=(), microphone=(), camera=()"
</IfModule>


# Chặn truy cập trực tiếp dotfiles như .htaccess, .env, .git.
<FilesMatch "^\.">
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order deny,allow
Deny from all
</IfModule>
</FilesMatch>

# Chặn truy cập trực tiếp file dữ liệu, log, backup, tạm.
<FilesMatch "\.(json|log|bak|tmp|lock|ini|env|sql)$">
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order deny,allow
Deny from all
</IfModule>
</FilesMatch>

<FilesMatch "^(config|functions)\.php$">
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order deny,allow
Deny from all
</IfModule>
</FilesMatch>

# Sitemap/robots SEO động: luôn xuất danh mục, sản phẩm và bài viết mới nhất qua sitemap.php.
RewriteRule ^sitemap\.xml$ sitemap.php [L,QSA]
RewriteRule ^robots\.txt$ robots.php [L,QSA]


# API công khai bảo mật bằng API Key user.
RewriteRule ^api/v1/categories/?$ api/v1/categories.php [L,QSA]
RewriteRule ^api/v1/products/?$ api/v1/products.php [L,QSA]
RewriteRule ^api/v1/product/?$ api/v1/product.php [L,QSA]
RewriteRule ^api/v1/balance/?$ api/v1/balance.php [L,QSA]
RewriteRule ^api/v1/orders/?$ api/v1/orders.php [L,QSA]
RewriteRule ^api/v1/order/create/?$ api/v1/order-create.php [L,QSA]
RewriteRule ^api/v1/order/status/?$ api/v1/order-status.php [L,QSA]
RewriteRule ^api/v1/order/delivery/?$ api/v1/order-delivery.php [L,QSA]
RewriteRule ^api/v1/order/download/?$ api/v1/order-download.php [L,QSA]
RewriteRule ^api/v1/order-download/?$ api/v1/order-download.php [L,QSA]
RewriteRule ^api-docs/?$ api-docs.php [L,QSA]

# URL SEO blog: /blog/slug-bai-viet
RewriteRule ^blog/([A-Za-z0-9-]+)/?$ blog-post.php?p=$1 [L,QSA]
RewriteRule ^blog/?$ blog.php [L,QSA]

# URL SEO sản phẩm: /products/slug-san-pham
# Nếu web nằm trong thư mục con, đặt file .htaccess này ở đúng thư mục chứa bộ code.
RewriteRule ^products/([A-Za-z0-9-]+)/?$ product.php?p=$1 [L,QSA]
RewriteRule ^products/?$ products.php [L,QSA]
