# Friendly URLs for POS
Options -Indexes
AddDefaultCharset UTF-8

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /Nine/public/

# API: /api/invoices  -> invoices.php
RewriteRule ^api/invoices$ api/invoices.php [L,QSA]

# Invoices: /invoices/{id} -> invoices/show.php?id={id}
RewriteRule ^invoices/([^/]+)/?$ invoices/show.php?id=$1 [L,QSA]
</IfModule>

# Security headers (basic)
<IfModule mod_headers.c>
Header always set X-Content-Type-Options "nosniff"
Header always set X-Frame-Options "SAMEORIGIN"
Header always set X-XSS-Protection "1; mode=block"
</IfModule>
