# =========================================
# 🔥 FORCE REMOVE FRAME BLOCK (WAJIB PALING ATAS)
# =========================================
<IfModule mod_headers.c>
Header always unset X-Frame-Options
</IfModule>

# =========================================
# 🔥 BASIC SETUP
# =========================================
Options -Indexes
DirectoryIndex index.php index.html

# =========================================
# 🔥 REWRITE ENGINE (CLEAN URL SAFE)
# =========================================
<IfModule mod_rewrite.c>
RewriteEngine On

# =========================
# FORCE HTTPS
# =========================
RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# =========================
# TRAILING SLASH FIX
# =========================
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.+)/$ /$1 [L,R=301]

# =========================
# SKIP FILE & FOLDER ASLI
# =========================
RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^ - [L]

# =========================
# CLEAN URL → .PHP
# =========================
RewriteCond %{REQUEST_FILENAME}.php -f
RewriteRule ^(.+)$ $1.php [L]

</IfModule>

# =========================================
# 🔥 PHP SETTINGS
# =========================================
php_value upload_max_filesize 300M
php_value post_max_size 320M
php_value max_execution_time 600
php_value max_input_time 600
php_value memory_limit 512M

# =========================================
# 🔥 PHP HANDLER
# =========================================
<IfModule mime_module>
AddHandler application/x-httpd-ea-php74___lsphp .php .phtml
</IfModule>

# =========================================
# 🔥 DISABLE CACHE (REALTIME SYSTEM)
# =========================================
<IfModule LiteSpeed>
CacheDisable public /
</IfModule>

<IfModule mod_headers.c>
Header always set Cache-Control "no-store, no-cache, must-revalidate, max-age=0"
Header always set Pragma "no-cache"
Header always set Expires "0"
</IfModule>

# =========================================
# 🔥 SESSION SECURITY
# =========================================
<IfModule mod_php.c>
php_flag session.use_strict_mode On
php_flag session.use_only_cookies On
php_flag session.use_trans_sid Off
</IfModule>

# =========================================
# 🔥 SECURITY HEADERS (FIX IFRAME)
# =========================================
<IfModule mod_headers.c>

# ❌ JANGAN PAKAI SAMEORIGIN LAGI
# Header set X-Frame-Options "SAMEORIGIN"

# ✅ IZINKAN DOMAIN UTAMA
Header set Content-Security-Policy "frame-ancestors 'self' https://rhelektronik.com https://www.rhelektronik.com"

# SECURITY TAMBAHAN
Header set X-Content-Type-Options "nosniff"
Header set X-XSS-Protection "1; mode=block"

</IfModule>

# php -- BEGIN cPanel-generated handler, do not edit
# Set the “ea-php74” package as the default “PHP” programming language.
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php74___lsphp .php .php7 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit
