RewriteEngine On

# WHITELIST MPESA SCRIPTS (IGNORE QUERY STRINGS)
RewriteCond %{THE_REQUEST} \s/blaqpremium/mpesa/test_live_stk\.php[\s\?] [NC]
RewriteRule ^mpesa/test_live_stk\.php$ - [L]

RewriteCond %{THE_REQUEST} \s/blaqpremium/mpesa/callback\.php[\s\?] [NC]
RewriteRule ^mpesa/callback\.php$ - [L]

# Disable ModSecurity for MPESA endpoints
<IfModule mod_security.c>
SecRuleEngine Off
SecFilterScanPOST Off
</IfModule>
