# @GSPL 2.3.15
# modules/GoogleSyncPlus/.htaccess
# Pattern whitelist: nega TUTTI i .php per default, abilita SOLO endpoint pubblici.
# Un nuovo file PHP interno non viene mai esposto per errore.

<FilesMatch "\.(dat|log|lock|sql|inc|tpl|bak|xml)$">
    Order Allow,Deny
    Deny from all
</FilesMatch>

<FilesMatch "\.php$">
    Order Allow,Deny
    Deny from all
</FilesMatch>

<FilesMatch "^(index\.php|auth\.php|SettingsAjax\.php|i18n\.php|flush_js\.php|health_check\.php)$">
    Order Allow,Deny
    Allow from all
</FilesMatch>
