<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteBase /webskripsi1/letter/

  RewriteCond %{REQUEST_FILENAME} !-f
  RewriteCond %{REQUEST_FILENAME} !-d
  RewriteRule ^ index.php [L]
</IfModule>

<FilesMatch "(^\.|composer\.json|composer\.lock|db\.php|config\.php|error_log|\.env)$">
    Require all denied
</FilesMatch>

<FilesMatch "\.(jpg|jpeg|png|gif|pdf|doc|docx)$">
    Require all granted
</FilesMatch>

<FilesMatch "\.(php|phtml|phar)$">
    Require all denied
</FilesMatch>

<IfModule mod_headers.c>
  Header always set X-Content-Type-Options "nosniff"
  Header always set X-Frame-Options "SAMEORIGIN"
  Header always set Referrer-Policy "strict-origin-when-cross-origin"
  Header always set X-XSS-Protection "1; mode=block"
</IfModule>

AddType application/pdf .pdf
AddType image/jpeg .jpg .jpeg
AddType image/png .png
AddType image/gif .gif
AddType application/msword .doc
AddType application/vnd.openxmlformats-officedocument.wordprocessingml.document .docx