# 🔒 0. Global Directory Indexing Off (Folder list leak 100% block)
Options -Indexes

RewriteEngine On
RewriteBase /

# 🔒 1. Block Sensitive Files (.env, .sql, .log, .json, .git, .bak, .lock)
<FilesMatch "\.(env|sql|log|json|git|md|yml|yaml|lock|bak|inc|ttf)$">
    Order allow,deny
    Deny from all
</FilesMatch>

# 🔒 2. Block Direct Access to Database/Config Files
<Files "db.php">
    Order allow,deny
    Deny from all
</Files>
<Files "config.php">
    Order allow,deny
    Deny from all
</Files>

# 3. Existing Files & Folders (Images, CSS, JS, Sounds) seedha load hone dein
RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^ - [L]

# 4. Admin Folder ko Bypass Karein (Taaki Admin Pages Index par na phekien)
RewriteCond %{REQUEST_URI} ^/admin/ [NC]
RewriteCond %{REQUEST_FILENAME}.php -f
RewriteRule ^admin/([a-zA-Z0-9_-]+)/?$ admin/$1.php [L,QSA]

# 5. API Calls Fix (api/aviator_api -> api/aviator_api.php)
RewriteRule ^api/([a-zA-Z0-9_-]+)/?$ api/$1.php [L,QSA]

# 6. Main Pages Clean URLs (/aviator -> aviator.php & /zets -> zets.php)
RewriteCond %{REQUEST_FILENAME}.php -f
RewriteRule ^([a-zA-Z0-9_-]+)/?$ $1.php [L,QSA]

# 7. Galat URL Par Index Redirect (Lekin Admin Folder ko chhod kar)
RewriteCond %{REQUEST_URI} !^/admin/ [NC]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME}.php !-f
RewriteRule ^.*$ index.php [L,R=302]

# php -- BEGIN cPanel-generated handler, do not edit
# Set the “ea-php81” package as the default “PHP” programming language.
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php81 .php .php8 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit
