# Meeting scheduler security
# Prevent direct access to configuration files
<Files "*.php">
    Require all denied
</Files>

# Only allow access to meeting handler
<Files "meeting_handler.php">
    Require all granted
</Files>

<Files "meeting.html">
    Require all granted
</Files>

# Set PHP limits for meeting scheduling
php_value max_execution_time 300
php_value max_input_time 300
php_value memory_limit 128M

# Enable CORS if needed
<IfModule mod_headers.c>
    Header always set Access-Control-Allow-Origin "*"
    Header always set Access-Control-Allow-Methods "POST, GET, OPTIONS"
    Header always set Access-Control-Allow-Headers "Content-Type"
</IfModule>

# Protect meeting data
<Files "meetings.json">
    Require all denied
</Files>

# Prevent directory listing
Options -Indexes
