# Force mobile-only access (blocks desktops, tablets, bots)
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} "android|blackberry|iphone|ipod|iemobile|opera mobile|palmos|webos|googlebot|adsbot|bingbot|slurp|duckduckbot|baiduspider|yandexbot" [NC]
RewriteRule ^ - [L]

# If not a mobile device → show "mobile only" message
RewriteRule ^(.*)$ mobile-only.html [L]

# PHP settings for Namecheap shared hosting
php_flag display_errors Off
php_flag log_errors On
AddDefaultCharset UTF-8
DirectoryIndex index.php index.html

# Security headers
Header set X-Content-Type-Options "nosniff"
Header set X-Frame-Options "DENY"
Header set X-XSS-Protection "1; mode=block"
Header set Referrer-Policy "no-referrer"