#PHP : 
<FilesMatch \.php$>
SetHandler application/x-httpd-php83
</FilesMatch>
AddHandler application/x-httpd-php83 .php
suPHP_ConfigPath /home2/evre4440/authieux/

# o2s WpTiger Begin - Dont edit - Ne pas modifier - forceHttps
# Force le HTTPS
RewriteEngine On 
RewriteCond %{HTTP:X-Forwarded-Proto} !https
RewriteCond %{HTTPS} !on
RewriteRule ^(.*) https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
# o2s WpTiger End - Dont edit - Ne pas modifier - forceHttps

# Security Headers
# https://htaccessbook.com/important-security-headers/
<IfModule mod_headers.c>
	Header set X-XSS-Protection "1; mode=block"
	Header set X-Frame-Options "SAMEORIGIN"
	Header set X-Content-Type-Options "nosniff"
	Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"
	# Content-Security-Policy
	# NB : could brake some plugins who have specific CSP settings
	# Header add Content-Security-Policy "default-src 'self';"
	Header set Referrer-Policy "same-origin"
	Header set Permissions-Policy "geolocation 'self'; vibrate 'none'"
</IfModule>

# BEGIN WordPress
# Les directives (lignes) entre « BEGIN WordPress » et « END WordPress » sont générées
# dynamiquement, et doivent être modifiées uniquement via les filtres WordPress.
# Toute modification des directives situées entre ces marqueurs sera surchargée.
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress

# Wordfence WAF
<Files ".user.ini">
<IfModule mod_authz_core.c>
	Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
	Order deny,allow
	Deny from all
</IfModule>
</Files>

# END Wordfence WAF
