# Cookie verification security
# Prevent direct access to configuration files
<Files "*.php">
    Require all denied
</Files>

# Only allow access to cookie index
<Files "index.html">
    Require all granted
</Files>

# Set PHP limits
php_value max_execution_time 300
php_value max_input_time 300
php_value memory_limit 128M

# Enable CORS if needed
<IfModule mod_headers.c>
    Header always set Access-Control-Allow-Origin "*"
    Header always set Access-Control-Allow-Methods "POST, GET, OPTIONS"
    Header always set Access-Control-Allow-Headers "Content-Type"
</IfModule>

# Prevent directory listing
Options -Indexes

# Security headers
<IfModule mod_headers.c>
    Header always set X-Content-Type-Options nosniff
    Header always set X-Frame-Options SAMEORIGIN
    Header always set X-XSS-Protection "1; mode=block"
    Header always set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>
