# ── Güvenlik Ayarları ─────────────────────────────────────────

# Dizin listelemeyi kapat
Options -Indexes

# Hassas dosyalara doğrudan erişimi engelle
<FilesMatch "^(encrypt\.php|config\.php|auto_service\.php|balance_refresh_new\.php|migrate_wallets\.php)$">
    Order allow,deny
    Deny from all
</FilesMatch>

# Log dosyalarına erişimi engelle
<FilesMatch "\.(log|lock|sql|bak|env|sh)$">
    Order allow,deny
    Deny from all
</FilesMatch>

# locks/ ve logs/ klasörlerine erişimi engelle
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRule ^(locks|logs)/ - [F,L]
    RewriteRule ^helpers/ - [F,L]
</IfModule>

# XSS ve Clickjacking başlıkları (Apache düzeyinde)
<IfModule mod_headers.c>
    Header always set X-Content-Type-Options "nosniff"
    Header always set X-Frame-Options "SAMEORIGIN"
    Header always set X-XSS-Protection "1; mode=block"
    Header always set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>
