Options -Indexes
Options +FollowSymLinks

RewriteEngine On
RewriteBase /

# Deny access to sensitive directories
RewriteRule ^app/ - [F,L]
RewriteRule ^system/ - [F,L]
RewriteRule ^writable/ - [F,L]

# Remove index.php from URL
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ index.php/$1 [L]

# Security headers
Header always set X-Content-Type-Options nosniff
Header always set X-Frame-Options SAMEORIGIN
Header always set X-XSS-Protection "1; mode=block"
