# Force HTTPS
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# Hide sensitive files
<FilesMatch "(config\.php|trade_model\.php|schema\.sql)$">
    Order Allow,Deny
    Deny from all
</FilesMatch>

# Disable directory listing
Options -Indexes

# PHP settings (optional, uncomment if needed)
# php_flag display_errors Off
# php_value upload_max_filesize 10M
