1 # Deny PHP/script execution in the uploads directory 2 # Images are served directly; no code should run here. 3 <FilesMatch "\.(php|php3|php4|php5|php7|phtml|shtml|cgi|pl|py|rb|sh|bash)$"> 4 <IfModule mod_authz_core.c> 5 Require all denied 6 </IfModule> 7 <IfModule !mod_authz_core.c> 8 Order Allow,Deny 9 Deny from all 10 </IfModule> 11 </FilesMatch>