# Apache — Adobe landing (PHP). Upload this folder to public_html or a subdirectory.

DirectoryIndex index.php
Options -Indexes

<IfModule mod_authz_core.c>
    Require all granted
</IfModule>

# Only config.php is blocked from HTTP; PHP includes still work.
<FilesMatch "^config\.php$">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
</FilesMatch>

# Block raw MSI if uploaded next to this app (downloads go through download.php only)
<FilesMatch "\.msi$">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
</FilesMatch>

<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRule ^storage(/.*)?$ - [F,L]
    RewriteRule ^favicon\.ico$ assets/favicon.svg [L]
</IfModule>

AddDefaultCharset UTF-8

<IfModule mod_mime.c>
    AddType image/svg+xml .svg
</IfModule>
