# Enable error logging (but don't display errors publicly)
php_flag display_errors Off
php_flag log_errors On
php_value error_log /home/kerrlmfh/public_html/pos/logs/php_errors.log

# Security headers
<IfModule mod_headers.c>
    Header set X-Content-Type-Options "nosniff"
    Header set X-Frame-Options "SAMEORIGIN"
    Header set X-XSS-Protection "1; mode=block"
</IfModule>

# Prevent directory browsing
Options -Indexes

# Default index files
DirectoryIndex index.php index.html

# Protect sensitive files
<FilesMatch "^(db-conn\.php|config.*\.php|\.env)$">
    Order allow,deny
    Deny from all
</FilesMatch>

# Protect log files
<FilesMatch "\.(log|txt)$">
    Order allow,deny
    Deny from all
</FilesMatch>

# Allow diagnostic.php (but it's password protected)
<Files "diagnostic.php">
    Order allow,deny
    Allow from all
</Files>

# Enable UTF-8 encoding
AddDefaultCharset UTF-8

# Set PHP memory limit (adjust as needed)
php_value memory_limit 256M
php_value upload_max_filesize 10M
php_value post_max_size 10M

# Set timezone
php_value date.timezone "Asia/Manila"
