Options -Indexes
DirectoryIndex index.php
RewriteEngine On
RewriteBase /alphabank/

# Friendly routes for the core application.
RewriteRule ^dashboard/?$ dashboard.php [L,QSA]
RewriteRule ^admin/?$ admin.php [L,QSA]
RewriteRule ^transfer/?$ transfer.php [L,QSA]
RewriteRule ^deposit/?$ deposit.php [L,QSA]
RewriteRule ^international/?$ international.php [L,QSA]
RewriteRule ^wire/?$ wire.php [L,QSA]
RewriteRule ^cards/?$ cards.php [L,QSA]
RewriteRule ^loans/?$ loans.php [L,QSA]
RewriteRule ^transactions/?$ transactions.php [L,QSA]
RewriteRule ^notifications/?$ notifications.php [L,QSA]
RewriteRule ^settings/?$ settings.php [L,QSA]
RewriteRule ^login/?$ login.php [L,QSA]
RewriteRule ^register/?$ register.php [L,QSA]

# Never expose database dumps, environment files or local documentation as raw files.
<FilesMatch "\.(sql|env|ini|log)$">
  Require all denied
</FilesMatch>

<IfModule mod_headers.c>
  Header always set X-Content-Type-Options "nosniff"
  Header always set Referrer-Policy "strict-origin-when-cross-origin"
  Header always set X-Frame-Options "SAMEORIGIN"
  Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"
</IfModule>
