# .htaccess
php_value max_execution_time 300
php_value max_input_time 300
php_value memory_limit 256M
php_value post_max_size 32M
php_value upload_max_filesize 32M

# Aktifkan rewrite engine
RewriteEngine On

# Proteksi file sensitif
<FilesMatch "\.(htaccess|htpasswd|ini|log|sh|sql|bak|config)$">
    Order Allow,Deny
    Deny from all
</FilesMatch>

# Proteksi direktori
Options -Indexes

# Set default charset
AddDefaultCharset UTF-8

# Proteksi dari XSS
<IfModule mod_headers.c>
    Header set X-XSS-Protection "1; mode=block"
    Header set X-Frame-Options "SAMEORIGIN"
    Header set X-Content-Type-Options "nosniff"
</IfModule>