nexus

public/uploads/.htaccess

# Deny PHP/script execution in the uploads directory
# Images are served directly; no code should run here.
<FilesMatch "\.(php|php3|php4|php5|php7|phtml|shtml|cgi|pl|py|rb|sh|bash)$">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Order Allow,Deny
        Deny from all
    </IfModule>
</FilesMatch>

1 # Deny PHP/script execution in the uploads directory
2 # Images are served directly; no code should run here.
3 <FilesMatch "\.(php|php3|php4|php5|php7|phtml|shtml|cgi|pl|py|rb|sh|bash)$">
4     <IfModule mod_authz_core.c>
5         Require all denied
6     </IfModule>
7     <IfModule !mod_authz_core.c>
8         Order Allow,Deny
9         Deny from all
10     </IfModule>
11 </FilesMatch>