# Traffic Werk Bill – security
Options -Indexes
<FilesMatch "^(config\.php|.*\.sqlite|.*\.md)$">
  Require all denied
</FilesMatch>
<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteRule ^inc/ - [F,L]
  RewriteRule ^scripts/ - [F,L]
</IfModule>
# Pass the Authorization header to PHP (needed for the MCP Bearer token on some hosts)
<IfModule mod_rewrite.c>
  RewriteCond %{HTTP:Authorization} .
  RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
</IfModule>
<IfModule mod_headers.c>
  Header always set X-Content-Type-Options "nosniff"
  Header always set Referrer-Policy "same-origin"
</IfModule>
<IfModule mod_php.c>
  php_flag display_errors off
</IfModule>
