# Uploads hold static media only — never execute scripts from here,
# even if a script file somehow lands in this folder.
Options -Indexes -ExecCGI
<FilesMatch "\.(?i:php|phtml|php[0-9]|pht|phar|cgi|pl|py|sh|asp|aspx|jsp)$">
  <IfModule mod_authz_core.c>
    Require all denied
  </IfModule>
  <IfModule !mod_authz_core.c>
    Order allow,deny
    Deny from all
  </IfModule>
</FilesMatch>
<IfModule mod_php.c>
  php_flag engine off
</IfModule>
RemoveHandler .php .phtml .php3 .php4 .php5 .php7 .php8 .phar
RemoveType   .php .phtml .php3 .php4 .php5 .php7 .php8 .phar
