# Pass the login token through to PHP (cPanel/Apache often drops it otherwise)
RewriteEngine On
RewriteCond %{HTTP:Authorization} .
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
<Files "_api.php">
  Require all denied
</Files>
