# 晚晚协议秒网页登录 - 安全规则
# 作者QQ: 2890875619
# QQ群: https://qm.qq.com/q/e8tmRb02Tm

# 禁止目录浏览
Options -Indexes

# 禁止访问敏感文件
<FilesMatch "^(data\.json|config\.php|\.user\.ini|\.env|composer\.(json|lock))$">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Order deny,allow
        Deny from all
    </IfModule>
</FilesMatch>

# 保护 includes 目录
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRule ^includes/ - [F,L]
</IfModule>

# 安全头部
<IfModule mod_headers.c>
    # 防止点击劫持
    Header always set X-Frame-Options "SAMEORIGIN"
    # 防止MIME类型嗅探
    Header always set X-Content-Type-Options "nosniff"
    # XSS保护
    Header always set X-XSS-Protection "1; mode=block"
    # Referrer策略
    Header always set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>

# PHP安全设置
<IfModule mod_php7.c>
    php_flag display_errors Off
    php_flag log_errors On
    php_value error_log "logs/php_error.log"
</IfModule>

# 默认首页
DirectoryIndex index.php index.html
