Header always unset X-Powered-By
Header unset X-Powered-By
Header set X-Frame-Options DENY
Header set Strict-Transport-Security "max-age=31536000" env=HTTPS
Header edit Set-Cookie ^(.*)$ $1;SameSite=none
Header edit Set-Cookie ^(.*)$ $1;Secure
Options All -Indexes

RewriteEngine On

RewriteRule ^documenti/enti/([0-9]+)/XML190/(20[0-9]{2})(_generale)?\.xml$ /anac/downloadXML.php?codice_ente=$1&anno=$2&generale=$3 [L]
RewriteRule ^documenti/enti/(.+)$ /allegati/logoEnte.php?ref=$1 [L]

RewriteRule ^(.+)/id([0-9]+)\-(.+)$ /$1/dettaglio.php?codice=$2	[L]

RewriteRule ^archivio_fabbisogni/(index\.php)?$ /matchmaking/index.php?tipologia=fabbisogni [L]
RewriteRule ^archivio_soluzioni/(index\.php)?$ /matchmaking/index.php?tipologia=soluzioni [L]
RewriteRule ^archivio_albo/(index\.php)?$ /albo_fornitori/index.php?tipologia=F [L]
RewriteRule ^archivio_professionisti/(index\.php)?$ /albo_fornitori/index.php?tipologia=P [L]
RewriteRule ^archivio_indagini/(index\.php)?$ /albo_fornitori/index.php?tipologia=I [L]
RewriteRule ^archivio_sda/(index\.php)?$ /albo_fornitori/index.php?tipologia=S [L]
RewriteRule ^archivio_mercato/(index\.php)?$ /albo_fornitori/index.php?tipologia=M [L]

RewriteRule ^api/advanced/api.json /api/rest/advanced/apiJSON.php [L]
RewriteRule ^api/advanced/latest/(.+) /api/rest/advanced/service.php [L]
RewriteRule ^api/rest/latest/(.+) /api/rest/service.php [L]

RewriteRule ^tenant-exp/(.*) /backend/enti/esportazione/download.php?token=$1 [L]

RewriteCond %{REQUEST_URI} !/backend/integrazione/index.php [NC]
RewriteCond %{REQUEST_URI} !/backend/integrazione/save.php [NC]
RewriteRule ^backend/integrazione/(.*) /backend/integrazione/index.php?slug=$1 [L]

RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^files/?(.*)?$ /allegati/servers/tus.php?redirect=true&$1 [QSA,L]

RewriteCond %{REQUEST_URI} ^/backend/npa/(versions|inc)/ [NC]
RewriteRule ^ - [F]

RewriteCond %{REQUEST_URI} ^/backend/guue/(class|config|integration|translations|eforms)/ [NC]
RewriteRule ^ - [F]

<FilesMatch "^(.*/)?(versions|src)/.*">
    Order Deny,Allow
    Deny from all
</FilesMatch>

ServerSignature Off