# Turn on the rewrite engine
RewriteEngine On
RewriteBase /

# --- API Rules ---
RewriteRule ^content/([a-zA-Z0-9_-]+)$ api/content.php?section=$1 [NC,QSA,L]
RewriteRule ^messages$ api/messages.php [NC,L]
RewriteRule ^auth/login$ api/auth.php [NC,L]
RewriteRule ^users$ api/users.php [NC,L]
RewriteRule ^upload$ api/upload.php [NC,L]

# Block direct access to script/config directories for security
RewriteRule ^(api|config|data_for_seed|middleware|vendor)/ - [F,L]