RewriteEngine On

# Block WordPress and PHP vulnerability scanners (site runs CFML, not WordPress)
RewriteCond %{REQUEST_URI} (^|/)(wp-admin|wp-includes|wp-content|wp-login\.php|xmlrpc\.php)(/|$|\?) [NC,OR]
RewriteCond %{REQUEST_URI} (^|/)(wordpress|wp-json)(/|$|\?) [NC,OR]
RewriteCond %{REQUEST_URI} wlwmanifest\.xml [NC,OR]
RewriteCond %{REQUEST_URI} ^/wp[0-9]?/ [NC,OR]
RewriteCond %{REQUEST_URI} ^/(20[0-9]{2}|blog|cms|shop|site|web|website|news|media|test|sito)/wp- [NC,OR]
RewriteCond %{REQUEST_URI} ^/(vendor/phpunit|cgi-bin/luci|boaform|GponForm|phpmyadmin) [NC,OR]
RewriteCond %{REQUEST_URI} ^/(\.env|\.git|\.svn|web\.config) [NC,OR]
RewriteCond %{REQUEST_URI} ^/(shell|c99|r57|wso|alfa|b374k|adminer|phpinfo|eval-stdin|wp-config\.php) [NC]
RewriteRule ^ - [F,L]

# Block random root-level PHP backdoor probes (allow index.php for DirectoryIndex)
RewriteCond %{REQUEST_URI} ^/[^/]+\.php$ [NC]
RewriteCond %{REQUEST_URI} !^/index\.php$ [NC]
RewriteRule ^ - [F,L]

# Block PHP probes one level deep (e.g. /x/index.php) except known app dirs
RewriteCond %{REQUEST_URI} ^/[^/]+/[^/]+\.php$ [NC]
RewriteCond %{REQUEST_URI} !^/(nydt|newadmin|events-chat|events-chattg)/ [NC]
RewriteRule ^ - [F,L]

# Block IPTV/scanner junk paths
RewriteCond %{REQUEST_URI} ^/(player_api\.php|cgi-bin/luci|\.well-known/acme-challenge/\.) [NC]
RewriteRule ^ - [F,L]

# Block known scanner user-agents
RewriteCond %{HTTP_USER_AGENT} ^$ [OR]
RewriteCond %{HTTP_USER_AGENT} (nikto|sqlmap|wpscan|acunetix|nessus|dirbuster|gobuster|ffuf|masscan|zgrab|nuclei) [NC]
RewriteRule ^ - [F,L]

RewriteRule ^professional/([a-z0-9_-]+)$ professional_/?article=$1 [NC,L]
RewriteRule ^article/([a-z0-9_-]+)$ article_/?article=$1 [NC,L]
RewriteRule ^event/([a-z0-9_-]+)$ event_/?article=$1 [NC,L]
                RewriteRule ^tourism-event/([a-z0-9_-]+)$ tourism-event_/?article=$1 [NC,L]
RewriteRule ^etd/([a-z0-9_-]+)$ etd_/?article=$1 [NC,L]
ReWriteRule /activityplanner.cfm /events/ [R=301,L,NC]
RewriteRule ^theater/([a-z0-9_-]+)$ listing.cfm?article=$1 [NC,L]
RewriteRule ^luggage-storage/([a-z0-9_-]+)$ listing.cfm?article=$1 [NC,L]
RewriteRule ^services/([a-z0-9_-]+)$ listing.cfm?article=$1 [NC,L]
RewriteRule ^nightlife/([a-z0-9_-]+)$ listing.cfm?article=$1 [NC,L]
RewriteRule ^restaurants/([a-z0-9_-]+)$ listing.cfm?article=$1 [NC,L]
RewriteRule ^shopping/([a-z0-9_-]+)$ listing.cfm?article=$1 [NC,L]
RewriteRule ^sightseeing/([a-z0-9_-]+)$ listing.cfm?article=$1 [NC,L]
RewriteRule ^cultural-arts/([a-z0-9_-]+)$ listing.cfm?article=$1 [NC,L]
RewriteRule ^articles/([a-z0-9_-]+)$ category-page-articles.cfm?article=$1 [NC,L]
RewriteRule ^cattest/([^/]+)/([^/]+)/?$ /includeme.cfm?section=$1&page=$2 [L]
RewriteRule ^cattest/([^/]+)/?$ /includeme.cfm?page=$1 [L]
RewriteRule ^cattest /includeme.cfm?page=cattest [L]