RewriteEngine On

# Force HTTPS
RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# Public routes
RewriteRule ^$ public/index.php [L]
RewriteRule ^([a-z0-9-]+)$ public/index.php?slug=$1 [L]

# Admin route
RewriteRule ^admin/?$ admin/index.php [L]

# Block direct access to core files
RewriteRule ^core/ - [F]
RewriteRule ^config.php - [F]