# Prevent any PHP execution inside the uploads directory — critical security
# control since this folder accepts user/admin-uploaded files.
<FilesMatch "\.(php|php\d|phtml|phar)$">
    Require all denied
</FilesMatch>

Options -Indexes -ExecCGI
AddHandler cgi-script .php .php3 .php4 .php5 .php7 .phtml .pl .py .jsp .asp .htm .shtml .sh .cgi
