#php_value default_charset ?UTF-8?
#php_value mbstring.language UTF-8
#php_value mbstring.internal_encoding UTF-8
#php_value mbstring.http_output UTF-8
#php_value mbstring.http_output UTF-8

#Options +FollowSymlinks
RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME}.php -f
RewriteRule ^(.+)$ /$1.php

<IfModule mod_rewrite.c>
RewriteEngine On



RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]


</IfModule>


# Editor-, Versions- und Konfigurationsdateien nie ausliefern.
# Anlass: .vscode/ war oeffentlich abrufbar und enthielt FTP-Zugangsdaten.
RedirectMatch 404 (?i)/\.(git|vscode|svn|hg|idea|env)(/|$)

<FilesMatch "(?i)\.(jsonc|sql|log|ini|bak|old|orig|save|swp|dist)$">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Order allow,deny
        Deny from all
    </IfModule>
</FilesMatch>