# Allow images only — block execution of any scripts uploaded here
<FilesMatch "\.(?i:php|phtml|php[0-9]|pl|py|cgi|sh)$">
  <IfModule mod_authz_core.c>
    Require all denied
  </IfModule>
  <IfModule !mod_authz_core.c>
    Order deny,allow
    Deny from all
  </IfModule>
</FilesMatch>
