# Apache: inoltra l'header Authorization a PHP (altrimenti spesso viene rimosso)
RewriteEngine On
RewriteCond %{HTTP:Authorization} .
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1

# Non esporre file di configurazione e librerie
<FilesMatch "^(config\.php)$">
    Require all denied
</FilesMatch>
