# Rewrite rules #
RewriteEngine on
RewriteBase /

# Core #
RewriteRule ^admin/cache/([\w/_-]*)$ /admin/cache/index.php?url=/$1 [L,QSA]
RewriteRule ^admin/config/([\w/_-]*)$ /admin/config/index.php?url=/$1 [L,QSA]
RewriteRule ^admin/content/([\w/_-]*)$ /admin/content/index.php?url=/$1 [L,QSA]
RewriteRule ^admin/errors/([\w/_-]*)$ /admin/errors/index.php?url=/$1 [L,QSA]
RewriteRule ^admin/files/([\w/_-]*)$ /admin/files/index.php?url=/$1 [L,QSA]
RewriteRule ^admin/langs/([\w/_-]*)$ /admin/langs/index.php?url=/$1 [L,QSA]
RewriteRule ^admin/maintain/([\w/_-]*)$ /admin/maintain/index.php?url=/$1 [L,QSA]
RewriteRule ^admin/member/([\w/_-]*)$ /admin/member/index.php?url=/$1 [L,QSA]
RewriteRule ^admin/modules/([\w/_-]*)$ /admin/modules/index.php?url=/$1 [L,QSA]
RewriteRule ^admin/server/([\w/_-]*)$ /admin/server/index.php?url=/$1 [L,QSA]
RewriteRule ^admin/smileys/([\w/_-]*)$ /admin/smileys/index.php?url=/$1 [L,QSA]
RewriteRule ^admin/themes/([\w/_-]*)$ /admin/themes/index.php?url=/$1 [L,QSA]
RewriteRule ^syndication/([\w/_-]*)$ /syndication/index.php?url=/$1 [L,QSA]

# High Priority Modules rules #

# calendar #
RewriteRule ^calendar/events_list/today/?$ /calendar/index.php?url=/events_list/&display_current_day_events=1 [L,QSA]

# Modules rules #

# articles #
RewriteRule ^articles/([\w/_-]*)$ /articles/index.php?url=/$1 [L,QSA]

# database #
RewriteRule ^database/([\w/_-]*)$ /database/index.php?url=/$1 [L,QSA]

# calendar #
RewriteRule ^calendar/([\w/_-]*)$ /calendar/index.php?url=/$1 [L,QSA]

# contact #
RewriteRule ^contact/([\w/_-]*)$ /contact/index.php?url=/$1 [L,QSA]

# online #
RewriteRule ^online/([\w/_-]*)$ /online/index.php?url=/$1 [L,QSA]

# faq #
RewriteRule ^faq/([\w/_-]*)$ /faq/index.php?url=/$1 [L,QSA]

# forum #
RewriteRule ^forum/forum-([0-9]+)-?([0-9]*)(\+?[^.]*)\.php$ /forum/forum.php?id=$1&p=$2 [L,QSA]
RewriteRule ^forum/topic-([0-9]+)-?([0-9]*)-?([0-9]*)-?([0-9]*)(\+?[^.]*)\.php$ /forum/topic.php?id=$1&pt=$2&idm=$3&quote=$4 [L]
RewriteRule ^forum/cat-([0-9]+)(\+?[^.]*)\.php$ /forum/index.php?id=$1 [L,QSA]

# forum #
RewriteRule ^forum/([\w/_-]*)$ /forum/index.php?url=/$1 [L,QSA]

# gallery #
RewriteRule ^gallery/gallery-([0-9]+)-?([0-9]*)-?([0-9]*)(\+?[^.]*)\.php$ /gallery/gallery.php?cat=$1&id=$2&p=$3 [L,QSA]

# gallery #
RewriteRule ^gallery/([\w/_-]*)$ /gallery/index.php?url=/$1 [L,QSA]

# GoogleMaps #
RewriteRule ^GoogleMaps/([\w/_-]*)$ /GoogleMaps/index.php?url=/$1 [L,QSA]

# web #
RewriteRule ^web/([\w/_-]*)$ /web/index.php?url=/$1 [L,QSA]

# guestbook #
RewriteRule ^guestbook/([\w/_-]*)$ /guestbook/index.php?url=/$1 [L,QSA]

# media #
RewriteRule ^media/media-([0-9]+)-?([0-9]*)-?([0-9]*)(\+?[^.]*)\.php$ /media/media.php?id=$1&cat=$2&p=$3 [L,QSA]

# media #
RewriteRule ^media/([\w/_-]*)$ /media/index.php?url=/$1 [L,QSA]

# news #
RewriteRule ^news/([\w/_-]*)$ /news/index.php?url=/$1 [L,QSA]

# newsletter #
RewriteRule ^newsletter/([\w/_-]*)$ /newsletter/index.php?url=/$1 [L,QSA]

# pages #
RewriteRule ^pages/([a-z0-9-]+)$ /pages/pages.php?title=$1 [L,QSA]

# customization #
RewriteRule ^customization/([\w/_-]*(?:\.css)?)$ /customization/index.php?url=/$1 [L,QSA]

# sitemap #
RewriteRule ^sitemap/([\w/_-]*)$ /sitemap/index.php?url=/$1 [L,QSA]

# QuestionCaptcha #
RewriteRule ^QuestionCaptcha/([\w/_-]*)$ /QuestionCaptcha/index.php?url=/$1 [L,QSA]

# ReCaptcha #
RewriteRule ^ReCaptcha/([\w/_-]*)$ /ReCaptcha/index.php?url=/$1 [L,QSA]

# SocialNetworks #
RewriteRule ^SocialNetworks/([\w/_-]*)$ /SocialNetworks/index.php?url=/$1 [L,QSA]

# poll #
RewriteRule ^poll/poll-([0-9]+)-?([0-9]*)-?([0-9]*)\.php$ /poll/poll.php?id=$1&r=$2&p=$3 [L,QSA]

# stats #
RewriteRule ^stats/stats-([a-z]+)\.php$ /stats/stats.php?$1=1 [L,QSA]

# download #
RewriteRule ^download/([\w/_-]*)$ /download/index.php?url=/$1 [L,QSA]

# wiki #
RewriteRule ^wiki/([a-z0-9-_]+)/?$ /wiki/wiki.php?title=$1 [L,QSA]

# User #
RewriteRule ^user/pm-?([0-9]+)-?([0-9]{0,})-?([0-9]{0,})-?([0-9]{0,})-?([a-z_]{0,})$ /user/pm.php?pm=$1&id=$2&p=$3&quote=$4 [L,QSA]
RewriteRule ^user/([\w/-_]*)$ /user/index.php?url=/$1 [L,QSA]
RewriteRule ^login/?$ /user/index.php?url=/login/ [L,QSA]
RewriteRule ^aboutcookie/?$ /user/index.php?url=/aboutcookie/ [L,QSA]
RewriteRule ^registration/?$ /user/index.php?url=/registration/ [L,QSA]
RewriteRule ^registration/confirm/?([a-z0-9]+)?/?$ /user/index.php?url=/registration/confirm/$1 [L,QSA]
RewriteRule ^password/lost/?$ /user/index.php?url=/password/lost/ [L,QSA]
RewriteRule ^password/change/?([a-z0-9]+)?/?$ /user/index.php?url=/password/change/$1 [L,QSA]
RewriteRule ^error/403/?$ /user/index.php?url=/error/403/ [L,QSA]
RewriteRule ^error/404/?$ /user/index.php?url=/error/404/ [L,QSA]

# PHP and HTTP protections #
# Block out use of illegal or unsafe characters in the HTTP Request
RewriteCond %{THE_REQUEST} ^.*(\r|\n|%0A|%0D).* [NC,OR]

# Block out any script that includes a <script> tag in URL
RewriteCond %{QUERY_STRING} (<|%3C)([^s]*s)+cript.*(>|%3E) [NC,OR]
# Block out any script trying to set a PHP GLOBALS variable via URL
RewriteCond %{QUERY_STRING} GLOBALS(=|[|\%[0-9A-Z]{0,2}) [OR]
# Block out any script trying to modify a _REQUEST variable via URL
RewriteCond %{QUERY_STRING} _REQUEST(=|[|\%[0-9A-Z]{0,2})
RewriteRule .* - [F,L]

# File and SQL injections protections #
RewriteCond %{REQUEST_METHOD} GET
RewriteCond %{QUERY_STRING} (;|<|>|'|"|\)|%0A|%0D|%22|%27|%3C|%3E|%00).*(/\*|union|select|insert|cast|set|declare|drop|update|md5|benchmark) [NC,OR]
RewriteCond %{QUERY_STRING} (<|>|'|%0A|%0D|%27|%3C|%3E|%00) [NC]
RewriteRule .* - [F,L]

# Bandwith protection #
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^https://www.belgiumclubsstv.be
RewriteRule .*upload/.*$ - [F]

# Stop hotlinking #
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^https://www.belgiumclubsstv.be
RewriteRule \.(bmp|gif|jpe?g|png|swf)$ - [F,L,NC]

# Charset #
AddDefaultCharset UTF-8

# Hide directory listings #
Options -Indexes

# Prevent viewing of .htaccess file #
<Files .htaccess>
    # Apache <= 2.3
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    # Apache 2.2
    <IfModule !mod_authz_core.c>
        Order Allow,Deny
        Deny from all
    </IfModule>
</Files>

# HTTP Headers #
<IfModule mod_headers.c>
	# Don't allow any pages to be framed externally - Defends against CSRF
	Header always set X-Frame-Options SAMEORIGIN
	# Control Cross-Domain Policies
	Header always set X-Permitted-Cross-Domain-Policies "master-only"
	# Turn on IE8-IE9 XSS prevention tools
	Header always set X-XSS-Protection "1; mode=block"
	# Prevent mime based attacks
	Header always set X-Content-Type-Options "nosniff"
	# Use this to force IE to hide that annoying browser compatibility button in the address bar.
	# IE=edge means IE should use the latest (edge) version of its rendering engine.
	# chrome=1 means IE should use the Chrome rendering engine if installed.
	BrowserMatch MSIE ie
	Header set X-UA-Compatible "IE=Edge"
</IfModule>

# Error pages #
ErrorDocument 403 /error/403/
ErrorDocument 404 /error/404/

# Gzip compression #
<IfModule mod_filter.c>
	<IfModule mod_deflate.c>
		# Compress HTML, CSS, JavaScript, Text, XML and fonts
		AddOutputFilterByType DEFLATE application/javascript
		AddOutputFilterByType DEFLATE application/rss+xml
		AddOutputFilterByType DEFLATE application/vnd.ms-fontobject
		AddOutputFilterByType DEFLATE application/x-font
		AddOutputFilterByType DEFLATE application/x-font-opentype
		AddOutputFilterByType DEFLATE application/x-font-otf
		AddOutputFilterByType DEFLATE application/x-font-truetype
		AddOutputFilterByType DEFLATE application/x-font-ttf
		AddOutputFilterByType DEFLATE application/x-javascript
		AddOutputFilterByType DEFLATE application/xhtml+xml
		AddOutputFilterByType DEFLATE application/xml
		AddOutputFilterByType DEFLATE font/opentype
		AddOutputFilterByType DEFLATE font/otf
		AddOutputFilterByType DEFLATE font/ttf
		AddOutputFilterByType DEFLATE image/svg+xml
		AddOutputFilterByType DEFLATE image/x-icon
		AddOutputFilterByType DEFLATE text/css
		AddOutputFilterByType DEFLATE text/html
		AddOutputFilterByType DEFLATE text/javascript
		AddOutputFilterByType DEFLATE text/plain
		AddOutputFilterByType DEFLATE text/xml

		# Remove browser bugs (only needed for really old browsers)
		BrowserMatch ^Mozilla/4 gzip-only-text/html
		BrowserMatch ^Mozilla/4\.0[678] no-gzip
		BrowserMatch \bMSIE !no-gzip !gzip-only-text/html
		<IfModule mod_headers.c>
			Header append Vary User-Agent
		</IfModule>
	</IfModule>
</IfModule>

# Expires Headers #
<IfModule mod_expires.c>
	ExpiresActive On

	# Default expiration: 1 week after request
	ExpiresDefault "access plus 1 week"

	# CSS and JS expiration: 1 week after request
	ExpiresByType text/css "access plus 1 week"
	ExpiresByType text/javascript "access plus 1 week"
	ExpiresByType text/x-javascript "access plus 1 week"
	ExpiresByType application/javascript "access plus 1 week"
	ExpiresByType application/x-javascript "access plus 1 week"

	# Fonts expiration: 1 week after request
	<IfModule mod_mime.c>
		AddType application/font-woff .woff
		AddType application/font-woff2 .woff2
	</IfModule>
	ExpiresByType   application/font-woff   "access plus 1 month"
	ExpiresByType   application/font-woff2   "access plus 1 month"

	# Image files expiration: 1 month after request
	ExpiresByType image/bmp "access plus 1 month"
	ExpiresByType image/gif "access plus 1 month"
	ExpiresByType image/jpeg "access plus 1 month"
	ExpiresByType image/jp2 "access plus 1 month"
	ExpiresByType image/pipeg "access plus 1 month"
	ExpiresByType image/png "access plus 1 month"
	ExpiresByType image/svg+xml "access plus 1 month"
	ExpiresByType image/tiff "access plus 1 month"
	ExpiresByType image/vnd.microsoft.icon "access plus 1 month"
	ExpiresByType image/x-icon "access plus 1 month"
	ExpiresByType image/ico "access plus 1 month"
	ExpiresByType image/icon "access plus 1 month"
	ExpiresByType text/ico "access plus 1 month"
	ExpiresByType application/ico "access plus 1 month"
	ExpiresByType image/vnd.wap.wbmp "access plus 1 month"
	ExpiresByType application/vnd.wap.wbxml "access plus 1 month"
	ExpiresByType application/smil "access plus 1 month"

	# Audio files expiration: 1 month after request
	ExpiresByType audio/basic "access plus 1 month"
	ExpiresByType audio/mid "access plus 1 month"
	ExpiresByType audio/midi "access plus 1 month"
	ExpiresByType audio/mpeg "access plus 1 month"
	ExpiresByType audio/x-aiff "access plus 1 month"
	ExpiresByType audio/x-mpegurl "access plus 1 month"
	ExpiresByType audio/x-pn-realaudio "access plus 1 month"
	ExpiresByType audio/x-wav "access plus 1 month"

	# Movie files expiration: 1 month after request
	ExpiresByType application/x-shockwave-flash "access plus 1 month"
	ExpiresByType x-world/x-vrml "access plus 1 month"
	ExpiresByType video/x-msvideo "access plus 1 month"
	ExpiresByType video/mpeg "access plus 1 month"
	ExpiresByType video/mp4 "access plus 1 month"
	ExpiresByType video/quicktime "access plus 1 month"
	ExpiresByType video/x-la-asf "access plus 1 month"
	ExpiresByType video/x-ms-asf "access plus 1 month"
</IfModule>

# Disable file etags #
FileETag none