.htaccess Code
(For Site Security Headers)
ORGANIC FOOD MARKETING - (EVER*GREEN SEO
(For Site Security Headers)
Copy and paste this block at the very end of your .htaccess file. This acts as the "Digital Shield" for mocno.rs.
# MOĆNO GLOBAL B2B SECURITY HEADERS
<IfModule mod_headers.c>
# 1. HSTS - Force HTTPS for 1 year (including subdomains)
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
# 2. X-Frame-Options - Prevent Clickjacking
Header always set X-Frame-Options "SAMEORIGIN"
# 3. X-Content-Type-Options - Prevent MIME sniffing
Header always set X-Content-Type-Options "nosniff"
# 4. Referrer-Policy - Protect user privacy on outbound links
Header always set Referrer-Policy "strict-origin-when-cross-origin"
# 5. Content Security Policy (Basic starting point)
# Allows scripts from your own domain and Google (Analytics/Ads/Fonts)
Header always set Content-Security-Policy "default-src 'self'; script-src 'self' https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:;"
</IfModule>
Backup first: Always save a copy of your current .htaccess before editing.
Cloudflare Users: If you use Cloudflare, you can actually set these headers under Rules > Transform Rules > Managed Transforms without touching any server code.
Verification: Once applied, visit SecurityHeaders.com and scan your URL. Your score should jump from a D/F to an A.
Once these are live, your Entity Authority for MOĆNO will increase because Google’s "Quality Raters" and AI crawlers will see a secure infrastructure. This is the foundation for outranking global competitors in the UAE and beyond.
Would you like me to walk you through how to verify if these changes are working once you've added them?