# Block PHP execution in upload dirs
<FilesMatch "\.(php|phtml|php3|php4|php5|phps|pl|py|jsp|asp|sh|cgi)$">
  Require all denied
</FilesMatch>
