# Block direct PHP execution of any uploaded software file (defense in depth
# on top of the blanket rule in admin/uploads/.htaccess)
<FilesMatch "\.(php|phtml|php3|php4|php5|phps|phar|pht|cgi|pl)$">
    Order allow,deny
    Deny from all
    Require all denied
</FilesMatch>
php_flag engine off
Options -Indexes
