<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /admin/

    # Mencegah orang ngintip isi folder (Security)
    Options -Indexes

    # 1. Kalau buka file .php secara langsung, paksa buang ekstensinya di URL
    # (Hanya untuk GET, supaya saat submit form Login datanya tidak hilang)
    RewriteCond %{REQUEST_METHOD} GET
    RewriteCond %{THE_REQUEST} ^[A-Z]{3,}\s([^.]+)\.php [NC]
    RewriteRule ^ %1 [R=301,L]

    # 2. Kalau buka /login, panggil file login.php
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteCond %{REQUEST_FILENAME}.php -f
    RewriteRule ^(.*)$ $1.php [L]
</IfModule>