# Enable URL rewriting
RewriteEngine On

# Set PHP to handle JSON properly
<IfModule mod_mime.c>
    AddType application/json .json
</IfModule>

# Protect config file
<Files "config.php">
    Order Allow,Deny
    Deny from all
</Files>

# Security headers
<IfModule mod_headers.c>
    Header always set X-Content-Type-Options nosniff
    Header always set X-Frame-Options DENY
</IfModule>
