# Desabilitar listagem
Options -Indexes

RewriteEngine On

# Permitir requisições do próprio servidor (cron/wget)
RewriteCond %{REMOTE_ADDR} ^127\.0\.0\.1$ [OR]
RewriteCond %{REMOTE_ADDR} ^::1$ [OR]
RewriteCond %{HTTP_USER_AGENT} "wget" [NC,OR]
RewriteCond %{HTTP_USER_AGENT} "curl" [NC,OR]
RewriteCond %{HTTP_USER_AGENT} "cron" [NC]
RewriteRule ^.*\.php$ - [L]

# Bloquear acesso direto de browsers (sem referer)
RewriteCond %{HTTP_REFERER} ^$
RewriteCond %{HTTP_USER_AGENT} "Mozilla|Chrome|Safari|Edge|Opera" [NC]
RewriteRule ^.*\.php$ - [R=403,L]