User-agent: *

# Block sensitive directories
Disallow: /admin_*
Disallow: /api_*
Disallow: /uploads/
Disallow: /cache/
Disallow: /includes/
Disallow: /private/
Disallow: /config.php

# Block specific internal files
Disallow: /dashboard.php
Disallow: /class_session.php
Disallow: /teacher_*.php
Disallow: /profile.php

# Explicitly allow the security file (RFC 9116)
Allow: /.well-known/security.txt

# Allow the login page and public news
Allow: /index.php
Allow: /news.php