I've changed with RewriteRules (no redirect) a typical PHP-like URL:
to more friendly one:
But I still can reach the same output using both the first and second URLs.
Problem to solve:
For security purposes and just because "I don't need one of them", I tried to block the first URL with a
403 response code using an
[F] flag matching rule. The problem is that it also blocks the second URL.
Is there any possible way to accomplish this without blocking the second URL? Is my thinking correct - should I ban the first URL?