# ==========================================
# .htaccess para WordPress + Moodle (CentOS 7)
# ==========================================

# --- Permitir acceso completo a Moodle ---
<FilesMatch "^cursos/.*\.php$">
    Require all granted
</FilesMatch>

# --- Bloquear archivos realmente peligrosos ---
<FilesMatch "\.(py|exe|suspected)$">
    Require all denied
</FilesMatch>

# --- Bloquear PHP solo fuera de Moodle y WordPress permitidos ---
<FilesMatch "\.php$">
    Require all denied
</FilesMatch>

# --- Permitir PHP legítimos de WordPress ---
<FilesMatch "^(index\.php|wp-blog-header\.php|wp-login\.php|wp-settings\.php|wp-load\.php|xmlrpc\.php)$">
    Require all granted
</FilesMatch>

# --- Reescritura estándar de WordPress ---
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /
    RewriteRule ^index\.php$ - [L]
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule . /index.php [L]
</IfModule>