# Uploaded files are served as static assets only — never executed.
<FilesMatch "\.(php|php3|php4|php5|phtml|pl|py|cgi|sh|asp|aspx)$">
  Require all denied
</FilesMatch>
Options -Indexes
