Performance Reports By System Of Leuzon

Product details

Photos, full description and specifications

fdhfladhs;fasdf# ============================================================
# Leuzon — main .htaccess (v3, 2026-09-26)
# ------------------------------------------------------------
# v3 changes:
# · Fixed the top-level rewrite rules that were accidentally
# nested inside <IfModule mod_headers.c> in v2
# · Explicitly allow POST to /api/ and /merchant/api/
# · Whitelist .well-known/ from the hidden-file block
# · Added safety for multipart POST (uploads)
# · Preserved all existing pretty URLs
# ------------------------------------------------------------
# - Static assets + PHP no-cache
# - Service worker: no-cache, no ETag, Clear-Site-Data
# - Merchant pretty URLs
# - Safe rewrites for shared hosting (Hostinger)
# ============================================================

DirectoryIndex index.php index.html
Options -Indexes +FollowSymLinks -MultiViews

# ============================================================
# HEADERS
# ============================================================
<IfModule mod_headers.c>

# ---------- Security ----------
Header always set X-Content-Type-Options "nosniff"
Header always set X-Frame-Options "SAMEORIGIN"
Header always set Referrer-Policy "strict-origin-when-cross-origin"
Header always unset X-Powered-By

# ---------- PHP: never cache ----------
<FilesMatch "\.php$">
Header set Cache-Control "no-store, no-cache, must-revalidate, max-age=0, private"
Header set Pragma "no-cache"
Header set Expires "0"
Header set Vary "Cookie"
</FilesMatch>

# ---------- JS / MJS: never cache ----------
<FilesMatch "\.(js|mjs)$">
Header set Cache-Control "no-cache, no-store, must-revalidate, max-age=0"
Header set Pragma "no-cache"
Header set Expires "0"
</FilesMatch>

# ---------- fcm-client.js: kill browser cache + ETag ----------
<Files "fcm-client.js">
Header set Cache-Control "no-cache, no-store, must-revalidate, max-age=0"
Header set Pragma "no-cache"
Header set Expires "0"
Header unset ETag
Header unset Last-Modified
</Files>

# ---------- firebase-messaging-sw.js: SW headers + kill cache ----------
<Files "firebase-messaging-sw.js">
ForceType application/javascript
Header set Service-Worker-Allowed "/"
Header set Cache-Control "no-cache, no-store, must-revalidate, max-age=0"
Header set Pragma "no-cache"
Header set Expires "0"
Header unset ETag
Header unset Last-Modified
Header set Clear-Site-Data '"cache"'
</Files>

# ---------- service-worker.js: same treatment if you use it ----------
<Files "service-worker.js">
ForceType application/javascript
Header set Service-Worker-Allowed "/"
Header set Cache-Control "no-cache, no-store, must-revalidate, max-age=0"
Header unset ETag
Header unset Last-Modified
</Files>

# ---------- Images / fonts: cache long-term (safe) ----------
<FilesMatch "\.(png|jpg|jpeg|gif|webp|svg|ico|woff2|woff|ttf|eot)$">
Header set Cache-Control "public, max-age=2592000, immutable"
</FilesMatch>

</IfModule>

# Disable ETags site-wide (forces browsers to always revalidate)
FileETag None

# ============================================================
# REWRITES
# ============================================================
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /

# ----------------------------------------------------------
# 0) API / MERCHANT-API POSTs — DO NOT BLOCK
# These must be reachable for uploads and JSON calls.
# ----------------------------------------------------------
RewriteRule ^api/ - [L]
RewriteRule ^merchant/api/ - [L]

# ----------------------------------------------------------
# 1) STATIC / SPECIAL FILES — serve directly
# ----------------------------------------------------------
RewriteRule ^favicon\.ico$ - [L]
RewriteRule ^firebase-messaging-sw\.js$ - [L]
RewriteRule ^service-worker\.js$ - [L]
RewriteRule ^fcm-client\.js$ - [L]
RewriteRule ^save-fcm-token\.php$ - [L]
RewriteRule ^manifest\.json$ - [L]
RewriteRule ^site\.webmanifest$ - [L]
RewriteRule ^robots\.txt$ - [L]
RewriteRule ^sitemap\.xml$ - [L]
RewriteRule ^\.well-known/ - [L]
RewriteRule ^favicon/ - [L]

# OAuth handlers
RewriteRule ^oauth/google-start\.php$ - [L]
RewriteRule ^oauth/google-callback\.php$ - [L]
RewriteRule ^oauth/facebook-start\.php$ - [L]
RewriteRule ^oauth/facebook-callback\.php$ - [L]
RewriteRule ^oauth/twitter-start\.php$ - [L]
RewriteRule ^oauth/twitter-callback\.php$ - [L]

# ----------------------------------------------------------