# Uploaded images only - never execute scripts from this folder
<FilesMatch "\.(php|phtml|php[0-9]?|phar|pl|py|cgi|sh)$">
    Require all denied
</FilesMatch>
Options -ExecCGI
php_flag engine off
