# Prevent execution of server-side scripts in uploads directory
<FilesMatch "\.(php|php3|php4|php5|php7|php8|phtml|phar|pht|cgi|pl|py|sh|bash|jsp|asp|aspx|exe|bat|cmd|ps1)$">
    Require all denied
</FilesMatch>
# Disable PHP execution
php_flag engine off
# Prevent directory listing
Options -Indexes
