RewriteEngine On

# Force HTTPS
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://rizikifresh.co.ke/$1 [L,R=301]

# Redirect old subdomain to main domain
RewriteCond %{HTTP_HOST} ^new\.rizikifresh\.co\.ke$ [NC]
RewriteRule ^(.*)$ https://rizikifresh.co.ke/$1 [L,R=301]

# Kill spam — 4 to 7 digit endings
RewriteRule ^.*-[0-9]{4,7}/?$ - [G,L]

# Kill spam ?ID= query strings
RewriteCond %{QUERY_STRING} ^ID=[0-9]+$
RewriteRule ^shop/.*$ - [G,L]

# Kill all /shop/ URLs
RewriteRule ^shop/.*$ - [G,L]

# Kill spam /s- URLs
RewriteRule ^s-.*$ - [G,L]

# Kill old WordPress pages
RewriteRule ^welcome-to-riziki-fresh/?$ - [G,L]
RewriteRule ^hass-avocado-from-kenya/?$ - [G,L]
RewriteRule ^fuerte-avocado-from-kenya/?$ - [G,L]
RewriteRule ^category/.*$ - [G,L]
RewriteRule ^wp-admin/.*$ - [F,L]
RewriteRule ^wp-login\.php$ - [F,L]

# Allow real files and folders to load normally
RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^ - [L]

# php -- BEGIN cPanel-generated handler, do not edit
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php81 .php .php8 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit