# Uploaded images only - never execute PHP from here
<FilesMatch "\.(php|phtml|php3|php4|php5|pl|py|cgi|sh)$">
  Require all denied
  <IfModule !mod_authz_core.c>
    Order deny,allow
    Deny from all
  </IfModule>
</FilesMatch>
