<IfModule mod_rewrite.c>
RewriteEngine On

# Kötü niyetli User-Agent'lar
RewriteCond %{HTTP_USER_AGENT} ^$ [OR]
RewriteCond %{HTTP_USER_AGENT} (crawler|harvest|libwww|wget|python|scan|nmap|sqlmap|curl|masscan|badbot|scrapy|httpclient|httplib|perl) [NC]
RewriteRule ^.* - [F,L]

# Yapay zeka botları (ChatGPT, GPTBot, Claude, CCBot, AmazonBot, vb.)
RewriteCond %{HTTP_USER_AGENT} (ChatGPT|GPTBot|CCBot|ClaudeBot|Anthropic|ai-crawler|Amazonbot|Bytespider|BingPreview|AI|Seekr|Sonic) [NC]
RewriteRule ^.* - [F,L]

# Bilinmeyen .php dosyalarına erişim = 404
RewriteCond %{THE_REQUEST} \.php [NC]
RewriteCond %{REQUEST_URI} !^/index\.php$ [NC]
RewriteCond %{REQUEST_URI} !^/wp-login\.php$ [NC]
RewriteCond %{REQUEST_URI} !^/wp-cron\.php$ [NC]
RewriteCond %{REQUEST_URI} !^/xmlrpc\.php$ [NC]
RewriteCond %{REQUEST_URI} !^/wp-admin [NC]
RewriteRule .* - [R=404,L]

# Yetkilendirme başlıkları için
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

# WordPress standart yönlendirme kuralları
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>