# Flutterwave Webhook - Allow access without authentication
# This file is a reference - merge these rules into your existing .htaccess

# Allow webhook endpoint to bypass session/auth checks
<Files "flutterwave-webhook.php">
    Order Allow,Deny
    Allow from all
    
    # Allow POST requests
    <Limit POST>
        Allow from all
    </Limit>
    
    # Optional: Restrict to Flutterwave IP ranges for extra security
    # Uncomment and add Flutterwave's IP addresses
    # Require ip 52.49.173.169
    # Require ip 52.214.14.220
    # Require ip 52.31.139.75
</Files>

# Protect webhook logs from public access
<FilesMatch "flutterwave_webhook\.log">
    Order Deny,Allow
    Deny from all
</FilesMatch>
