# Block access via IP address
RewriteEngine On
RewriteCond %{HTTP_HOST} ^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}
RewriteRule .* - [F,L]

# Only allow HTTP port 88 and localhost
RewriteCond %{SERVER_PORT} !^88$
RewriteRule .* - [F,L]

RewriteCond %{HTTP_HOST} !^localhost:88$
RewriteRule .* - [F,L]

# Block HTTPS access
RewriteCond %{HTTPS} on
RewriteRule .* - [F,L]

# Set security headers
Header set X-Content-Type-Options "nosniff"
Header set X-Frame-Options "DENY"
Header set X-XSS-Protection "1; mode=block"

# Disable directory browsing
Options -Indexes

# Protect .htaccess file
<Files .htaccess>
    Order Allow,Deny
    Deny from all
</Files>