Options -Indexes
RewriteEngine On

# No permitir acceso directo a archivos sensibles
<FilesMatch "^(\.env|composer\.(json|lock))$">
    Require all denied
</FilesMatch>

RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^(.*)$ index.php?url=$1 [QSA,L]
