Options -Indexes
DirectoryIndex index.php
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule ^(?:_app|_private|_handover)(?:/|$) - [F,L,NC]
RewriteRule (^|/)\. - [F,L]
RewriteRule \.(?:json|jsonl|log|bak|sql|env|ini|key|md|lock|tmp)$ - [F,L,NC]
RewriteCond %{HTTP_HOST} ^(?:www\.)?promobook\.co\.uk$ [NC]
RewriteCond %{HTTPS} !=on [OR]
RewriteCond %{HTTP_HOST} ^www\.promobook\.co\.uk$ [NC]
RewriteRule ^ https://promobook.co.uk%{REQUEST_URI} [R=301,L,NE]
RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^ - [L]
RewriteRule ^ index.php [L,QSA]
</IfModule>
<IfModule mod_headers.c>
Header always set X-Content-Type-Options "nosniff"
Header always set X-Frame-Options "DENY"
Header always set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>
<IfModule mod_expires.c>
ExpiresActive On
ExpiresByType image/jpeg "access plus 30 days"
ExpiresByType image/png "access plus 30 days"
ExpiresByType font/woff2 "access plus 30 days"
</IfModule>
