RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^api-(.*)$ api-$1.php [L,QSA]

# Blok akses langsung ke PHP kecuali via rewrite
<FilesMatch "^api-.*\.php$">
  # Biarkan diakses via rewrite
</FilesMatch>

# Izinkan gambar produk ditampilkan, blokir file upload lainnya
RewriteRule ^uploads/products/.*\.(jpe?g|png|webp|gif)$ - [L,NC]
RewriteRule ^uploads/ - [F,L]
