# Phase 8.0 - ERP module blocked (Option C: retained but explicitly blocked)
#
# WHY
#
# pages/ holds BOTH the live CMS screens and the unused accounting module,
# so this cannot be a directory-wide rule. Each file below was checked
# individually for the tables it queries; only files that touch ERP tables
# exclusively are listed.
#
# The accounting module has never been used. Verified from the production
# dump: journal, journal_item, expenses, payment, sales_master,
# sales_order, purchase_*, loan_history, supplier_info, donar_info and
# warehouse_info all contain ZERO rows. Every operation writes a journal
# entry, and journal is empty - nothing has ever completed.
#
# These files hold 14 of the 20 remaining authenticated SQL-injection
# points. Rewriting financial code nobody uses is riskier than denying
# access to it.
#
# DELIBERATELY NOT BLOCKED
#
#   mis/company_setup.php   uses company_info - CMS content, still in use
#   add_university, blog_*, faq, news, notice_board, addpage, page_category,
#   slider, images, call_back (reads the LIVE tblcontact), team, award,
#   chairman_msg, board_of_director, certification, achievement_showcase,
#   field_of_study, study_level, campus_setting, location, short_location,
#   manual_sms, about, index, login, logout
#
# TO REVERSE
#
#   delete this file
#
# The files remain on disk and in git; the database tables are untouched;
# no business logic has been modified.
#
# See docs/ERP-USAGE-DECISION.md and docs/PHASE-8.0-BLOCKER-STATUS.md.

<FilesMatch "^(sale_entry|sales_list|sales_ajax|sales_edit_ajax|sales_view_ajax|sales_view_ajax2|sales_print_view|invoice|cash_collection|cash_collection_old|collection_ajax|collection_update_ajax|add_expense|details_expense|expense_report|loan_give|loan_give_1|loan_take|loan_ajax|item_info|item_catagory|item_opening|customer_setup|party_ajax|party_info_ajax|party_info_ajax_corporate|payment_view_ajax|report|master_report|delete_ajax)\.php$">
    <IfModule mod_authz_core.c>
        # Apache 2.4
        Require all denied
    </IfModule>

    <IfModule !mod_authz_core.c>
        # Apache 2.2
        Order allow,deny
        Deny from all
    </IfModule>
</FilesMatch>
