# Deny PHP execution in uploads — serve images only
<FilesMatch "\.php$">
    Deny from all
</FilesMatch>
Options -Indexes
