# Bloquear acceso directo a includes/, data/, backups/
<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteRule ^(includes|data|backups)/ - [F,L]
</IfModule>

# Evitar ejecución de PHP dentro de uploads/
<Directory "uploads">
  <FilesMatch "\.(php|phtml|phar)$">
    Require all denied
  </FilesMatch>
</Directory>

# Defaults
Options -Indexes
DirectoryIndex index.php

# Charset
AddDefaultCharset UTF-8

# Cache estáticos
<IfModule mod_expires.c>
  ExpiresActive On
  ExpiresByType text/css "access plus 7 days"
  ExpiresByType image/png "access plus 30 days"
  ExpiresByType image/jpeg "access plus 30 days"
  ExpiresByType image/svg+xml "access plus 30 days"
</IfModule>
