# ═══ ESPACEPRO AUTO — carrosserieelyazidi.com — Bouclier de sécurité ═══

# 1) HTTPS obligatoire (connexion chiffrée)
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# 2) Interdire l'affichage du contenu des dossiers
Options -Indexes

# 3) Fichiers internes : jamais ouverts depuis Internet
<FilesMatch "^(db\.php|sauvegarde_lib\.php|canva_sntl_lib\.php|\.user\.ini|\.htaccess|error_log|php_errors\.log)$">
  Require all denied
</FilesMatch>
# Archives, sauvegardes, modèle Excel, scripts Windows
<FilesMatch "\.(sql|gz|zip|rar|7z|tar|bak|old|orig|log|env|ini|sh|inc|xlsx|xls|ps1|bat|cnf)$">
  Require all denied
</FilesMatch>

# 4) Protections du navigateur
<IfModule mod_headers.c>
  Header always set X-Content-Type-Options "nosniff"
  Header always set X-Frame-Options "SAMEORIGIN"
  Header always set Referrer-Policy "strict-origin-when-cross-origin"
  Header always set Permissions-Policy "geolocation=(), microphone=(), payment=()"
  Header always set Strict-Transport-Security "max-age=31536000"
  Header always unset X-Powered-By
  Header unset X-Powered-By
</IfModule>
# ═══ Fin du bouclier ═══