RewriteEngine On

# Redirecionador de afiliado
RewriteRule ^r/([A-Za-z0-9]+)$ r.php?c=$1 [L,QSA]

# SEO: URLs limpas de produto
RewriteRule ^produto/([A-Za-z0-9\-]+)$ produto.php?slug=$1 [L,QSA]

# robots e sitemap dinamicos (respeitam a chave de indexacao)
RewriteRule ^robots\.txt$  robots.php  [L]
RewriteRule ^sitemap\.xml$ sitemap.php [L]

# Nunca servir configuracao, codigo-fonte ou SQL
RedirectMatch 404 ^/(config|src|bin|sql|admin)/\.
<FilesMatch "\.(sql|md|lock)$">
  Require all denied
</FilesMatch>

<IfModule mod_headers.c>
  Header always set X-Content-Type-Options "nosniff"
  Header always set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>
