/home/techb158/workloadmatch.com/api
Edit: /home/techb158/workloadmatch.com/api/.htaccess (762B)
Options -Indexes -MultiViews
RewriteEngine On
# Set CORS and JSON content type headers
Header always set Access-Control-Allow-Origin "*"
Header always set Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
Header always set Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With"
Header always set Content-Type "application/json; charset=utf-8"
# Handle preflight OPTIONS request
RewriteCond %{REQUEST_METHOD} OPTIONS
RewriteRule ^(.*)$ index.php [L]
# Route all API requests through index.php
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ index.php?route=$1 [QSA,L]
# Deny access to sensitive files
Order allow,deny
Deny from all