FM / F2

/home/u764571690/domains/savitrfoundation.com/public_html/F2/

/home/u764571690/domains/savitrfoundation.com/public_html/F2

Name	Size	Mode	Actions
.htaccess	1591	0644	edit dl rm
api_process.php	9720	0644	edit dl rm
app.min.js	14175	0644	edit dl rm
app.secure.js	24213	0644	edit dl rm
get_token.php	1846	0644	edit dl rm
IMG-20250623-WA0105 - Copy - Copy.jpg	8083	0644	edit dl rm
IMG-20250623-WA0105 - Copy.jpg	8083	0644	edit dl rm
IMG-20250623-WA0105.jpg	8083	0644	edit dl rm
index.php	108929	0644	edit dl rm
SECURITY.md	5056	0644	edit dl rm
test.php	91400	0644	edit dl rm

Edit: /home/u764571690/domains/savitrfoundation.com/public_html/F2/.htaccess (1591B)

# Security Configuration for Finger Data Application
# यह file security settings को protect करती है

# Prevent directory listing
Options -Indexes

# Prevent access to sensitive files
<FilesMatch "\.(htaccess|htpasswd|ini|log|sh|sql|bak|backup)$">
    Order allow,deny
    Deny from all
</FilesMatch>

# Protect PHP files from direct access (if needed)
<FilesMatch "^(api_process|get_token)\.php$">
    # Allow POST requests only
    <LimitExcept POST>
        Order deny,allow
        Deny from all
    </LimitExcept>
</FilesMatch>

# Security Headers
<IfModule mod_headers.c>
    Header set X-Content-Type-Options "nosniff"
    Header set X-Frame-Options "DENY"
    Header set X-XSS-Protection "1; mode=block"
    Header set Referrer-Policy "strict-origin-when-cross-origin"
    Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'"
</IfModule>

# Prevent access to hidden files
<FilesMatch "^\.">
    Order allow,deny
    Deny from all
</FilesMatch>

# Enable compression for better performance
<IfModule mod_deflate.c>
    AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css text/javascript application/javascript application/json
</IfModule>

# Cache control
<IfModule mod_expires.c>
    ExpiresActive On
    ExpiresByType text/css "access plus 1 month"
    ExpiresByType application/javascript "access plus 1 month"
    ExpiresByType image/jpeg "access plus 1 month"
    ExpiresByType image/png "access plus 1 month"
</IfModule>

# Security Configuration for Finger Data Application # यह file security settings को protect करती है # Prevent directory listing Options -Indexes # Prevent access to sensitive files Order allow,deny Deny from all # Protect PHP files from direct access (if needed) # Allow POST requests only Order deny,allow Deny from all # Security Headers Header set X-Content-Type-Options "nosniff" Header set X-Frame-Options "DENY" Header set X-XSS-Protection "1; mode=block" Header set Referrer-Policy "strict-origin-when-cross-origin" Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'" # Prevent access to hidden files Order allow,deny Deny from all # Enable compression for better performance AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css text/javascript application/javascript application/json # Cache control ExpiresActive On ExpiresByType text/css "access plus 1 month" ExpiresByType application/javascript "access plus 1 month" ExpiresByType image/jpeg "access plus 1 month" ExpiresByType image/png "access plus 1 month"