EVOLUTION-NINJA
Edit File: .htaccess
# RewriteEngine On # RewriteCond %{REQUEST_URI} ^/system.* # RewriteRule ^(.*)$ index.php?/$1 [L] # RewriteCond %{REQUEST_FILENAME} !-f # RewriteCond %{REQUEST_FILENAME} !-d # RewriteRule ^(.+)$ index.php?/$1 [L] # RewriteCond %{QUERY_STRING} =download # RewriteRule ([^/]*)$ - [L,E=download:$1] # Header onsuccess set Content-disposition "attachment; filename=%{download}e" env=download # <IfModule mod_headers.c> # Header always edit Set-Cookie ^(.*)$ "$1; HttpOnly; SameSite=Lax" # Header unset X-Powered-By # </IfModule> <IfModule mod_rewrite.c> RewriteEngine On RewriteBase /power_pik/ # Protect system folder (block access directly) RewriteCond %{REQUEST_URI} ^/power_pik/system.* RewriteRule ^(.*)$ /power_pik/index.php?/$1 [L] # Main rewrite rule RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule ^(.*)$ index.php/$1 [L] </IfModule> <IfModule mod_headers.c> Header always edit Set-Cookie ^(.*)$ "$1; HttpOnly; SameSite=Lax" Header unset X-Powered-By </IfModule> #php_value upload_max_filesize 300000000M #php_value post_max_size 300000000M #php_value memory_limit 300M #php_value max_execution_time 259200 #php_value max_input_time 259200 #php_value session.gc_maxlifetime 1200 ###################### SSL ############################# #<IfModule mod_headers.c> #Header set X-XSS-Protection "1; mode=block" #Header always append X-Frame-Options SAMEORIGIN #Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains" #Header set Referrer-Policy "same-origin" #Header set Feature-Policy "geolocation 'self'; vibrate 'none'" #Header set Content-Security-Policy "default-src https://www.google.com/; child-src 'none'; img-src 'self' data: https:; style-src 'self' ; script-src 'self'" #</IfModule>