Options +FollowSymLinks
RewriteEngine On
RewriteBase /

# Allow access to all
<IfModule mod_authz_core.c>
    Require all granted
</IfModule>

# Allow direct access to files
<FilesMatch "\.(css|js|jpg|jpeg|png|gif|ico|pdf|woff|woff2|ttf|svg)$">
    Require all granted
</FilesMatch>

# Handle Front Controller
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ index.php?url=$1 [QSA,L]

# Protect PHP files except index.php
<FilesMatch "^(?!index\.php).*\.php$">
    Order allow,deny
    Deny from all
</FilesMatch>

# Increase PHP upload limits
php_value upload_max_filesize 500M
php_value post_max_size 500M
php_value max_execution_time 300
php_value max_input_time 300