# Harden uploads directory — never execute scripts here
Options -ExecCGI -Indexes
<IfModule mod_php.c>
    php_flag engine off
</IfModule>
<IfModule mod_authz_core.c>
    <FilesMatch "\.(php|phtml|php[0-9]|phar|cgi|pl|asp|aspx|sh)$">
        Require all denied
    </FilesMatch>
</IfModule>
<IfModule !mod_authz_core.c>
    <FilesMatch "\.(php|phtml|php[0-9]|phar|cgi|pl|asp|aspx|sh)$">
        Order allow,deny
        Deny from all
    </FilesMatch>
</IfModule>
