.htaccess

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME} !-l
RewriteRule ^(.*)$ app.php?url=$1 [QSA,L]
RewriteRule ^([^\.]+)$ app.php [NC,L]

RewriteRule ^(.*)\.obf$ obf.php?path=$1 [QSA,L]

RewriteRule ^project/(.*)$ app.php?url=404 [QSA,L]
RewriteRule ^vault/(.*)$ app.php?url=404 [QSA,L]
RewriteRule ^src/reserved(.*)$ app.php?url=404 [QSA,L]
RewriteRule ^bin/php/(.*)$ app.php?url=404 [QSA,L]
RewriteRule ^project.json$ app.php?url=404 [QSA,L]
</IfModule>

DirectoryIndex app.php

#Initialize mod_rewrite
RewriteEngine On
<FilesMatch "\.(html|htm|js|css)$">
  FileETag None
  <IfModule mod_headers.c>
    Header unset ETag
    Header set Cache-Control "max-age=0, no-cache, no-store, must-revalidate"
    Header set Pragma "no-cache"
    Header set Expires "Wed, 12 Jan 1980 05:00:00 GMT"
  </IfModule>
</FilesMatch>