ErrorDocument 404 /404.php
Options -Indexes
RewriteEngine On
RewriteRule ^mobil-uygulama/?$ index.php?page=mobile [L,QSA]
RewriteRule ^kvkk/?$ index.php?page=kvkk [L,QSA]
RewriteRule ^gizlilik/?$ index.php?page=privacy [L,QSA]
RewriteRule ^hizmet-sozlesmesi/?$ index.php?page=terms [L,QSA]
RewriteRule ^domain-hosting/?$ domain_hosting_offer.php [L,QSA]
RewriteBase /

# SEO dostu müşteri ve yönetim paneli adresleri
RewriteCond %{THE_REQUEST} \s/+panel\.php(?:[?\s]) [NC]
RewriteRule ^panel\.php$ /musteri-paneli [R=301,L]
RewriteCond %{THE_REQUEST} \s/+admin\.php(?:[?\s]) [NC]
RewriteRule ^admin\.php$ /yonetim-paneli [R=301,L]
RewriteRule ^musteri-paneli/?$ panel.php [L,QSA]
RewriteRule ^musteri-paneli/hizmetler/?$ panel.php?tab=services [L,QSA]
RewriteRule ^musteri-paneli/alan-adlari/?$ panel.php?tab=domains [L,QSA]
RewriteRule ^musteri-paneli/lisanslar/?$ panel.php?tab=licenses [L,QSA]
RewriteRule ^musteri-paneli/siparisler/?$ panel.php?tab=orders [L,QSA]
RewriteRule ^musteri-paneli/hesabim/?$ account.php [L,QSA]
RewriteRule ^musteri-paneli/faturalar/?$ invoices.php [L,QSA]
RewriteRule ^musteri-paneli/bakiye-yukle/?$ balance_topup.php [L,QSA]
RewriteRule ^musteri-paneli/hizmet/([0-9]+)/?$ service_manage.php?id=$1 [L,QSA]
RewriteRule ^musteri-paneli/alan-adi/([0-9]+)/?$ domain_manage.php?id=$1 [L,QSA]
RewriteRule ^musteri-paneli/destek/?$ ticket.php [L,QSA]
RewriteRule ^musteri-paneli/destek/([0-9]+)/?$ ticket_detail.php?id=$1 [L,QSA]
RewriteRule ^yonetim-paneli/?$ admin.php [L,QSA]

# SEO dostu müşteri erişim adresleri
RewriteCond %{THE_REQUEST} \s/+login\.php(?:[?\s]) [NC]
RewriteRule ^login\.php$ /musteri-girisi [R=301,L]
RewriteCond %{THE_REQUEST} \s/+register\.php(?:[?\s]) [NC]
RewriteRule ^register\.php$ /hesap-olustur [R=301,L]
RewriteRule ^musteri-girisi/?$ login.php [L,QSA]
RewriteRule ^hesap-olustur/?$ register.php [L,QSA]
# Eski PHP adreslerini SEO dostu URL'lere yönlendir
RewriteCond %{THE_REQUEST} \s/+knowledgebase\.php(?:[?\s]) [NC]
RewriteRule ^knowledgebase\.php$ /yardim [R=301,L]
RewriteCond %{THE_REQUEST} \s/+announcements\.php(?:[?\s]) [NC]
RewriteRule ^announcements\.php$ /duyurular [R=301,L]


# V70: Paket farklı müşteri domainlerinde çalışacağı için sabit ONGO domain yönlendirmesi kaldırıldı.
# HTTPS zorlaması yalnızca GET/HEAD için yapılır; ödeme callback POST'ları bozulmaz.
RewriteCond %{REQUEST_METHOD} ^(?:GET|HEAD)$
RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L,NE]

# Hassas yapılandırma / anahtar / yedek dosyalarını web erişimine kapat.
<FilesMatch "^(config\.php|config\.sample\.php|.*\.sql|.*\.bak|.*\.log|README.*|composer\.(json|lock))$">
 Require all denied
 Deny from all
</FilesMatch>
RewriteRule ^storage/ - [F,L]

RewriteRule ^internet/?$ index.php?page=internet [L,QSA]
RewriteRule ^sms/?$ index.php?page=sms [L,QSA]
RewriteRule ^musteri-paneli/sms/?$ customer_sms.php [L,QSA]
RewriteRule ^kampanyalar/?$ index.php?page=campaigns [L,QSA]
RewriteRule ^bayilik/?$ index.php?page=reseller [L,QSA]
RewriteRule ^duyurular/?$ announcements.php [L,QSA]
RewriteRule ^duyurular/([a-zA-Z0-9-]+)/?$ announcements.php?slug=$1 [L,QSA]
RewriteRule ^blog/?$ index.php?page=blog [L,QSA]
RewriteRule ^blog/([a-zA-Z0-9-]+)/?$ index.php?page=blog-post&slug=$1 [L,QSA]
RewriteRule ^bilgi-bankasi/?$ knowledgebase.php [L,QSA]
RewriteRule ^yardim/?$ knowledgebase.php [L,QSA]
RewriteRule ^yardim/([a-zA-Z0-9-]+)/?$ index.php?page=help-article&slug=$1 [L,QSA]
RewriteRule ^webmaster-araclari/(dns|ip|headers|whois)/?$ index.php?page=tools&tool=$1 [L,QSA]
RewriteRule ^webmaster-araclari/?$ index.php?page=tools [L,QSA]
RewriteRule ^marka-tescil/?$ index.php?page=trademark [L,QSA]
RewriteRule ^hosting/?$ hosting.php [L,QSA]
RewriteRule ^bulut-sunucu/?$ hosting.php [L,QSA]
RewriteRule ^sanal-sunucu/?$ vds.php [L,QSA]
RewriteRule ^alan-adi/?$ index.php?page=domain [L,QSA]
RewriteRule ^yazilimlar/?$ software.php [L,QSA]
RewriteRule ^referanslar/?$ index.php?page=references [L,QSA]
RewriteRule ^kurumsal/hakkimizda/?$ index.php?page=about [L,QSA]
RewriteRule ^kurumsal/iletisim/?$ index.php?page=contact [L,QSA]
RewriteRule ^cozumler/([a-z0-9-]+)/?$ index.php?page=category&slug=$1 [L,QSA]
RewriteRule ^yazilim/([a-zA-Z0-9-]+)/?$ index.php?page=product&slug=$1 [L,QSA]
RewriteRule ^urun/([0-9]+)/?$ index.php?page=product&id=$1 [L,QSA]

RewriteRule ^site-yap/sablon/([a-z0-9-]+)/?$ theme_demo.php?slug=$1 [L,QSA]
RewriteRule ^site-yap/tema/([a-z0-9-]+)/?$ theme_demo.php?theme=$1 [L,QSA]
RewriteRule ^site-yap/?$ site_yap.php [L,QSA]
RewriteRule ^musteri-paneli/site-yap/?$ site_builder.php [L,QSA]
RewriteRule ^musteri-paneli/site-yap/sitejet-donus/([0-9]+)/([a-f0-9]{64})(?:/publish)?/?$ sitejet_return.php?service_id=$1&token=$2 [L,QSA]
RewriteRule ^musteri-paneli/site-yap/editor/([0-9]+)/?$ site_builder_editor.php?id=$1 [L,QSA]
RewriteRule ^sitemap\.xml$ sitemap.php [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^ 404.php [L]
<IfModule mod_headers.c>
 Header always set X-Content-Type-Options "nosniff"
 Header always set X-Frame-Options "SAMEORIGIN"
 Header always set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>

# ONGO V71 licensing hardening
<FilesMatch "^(license_client\.php|license_setup\.php|config\.php|config\.sample\.php)$">
  Require all denied
</FilesMatch>
RewriteRule ^storage/ - [F,L]
