# Images only — no PHP execution in upload folder
<FilesMatch "\.(php|phtml|php3|php4|php5|phps)$">
    Require all denied
</FilesMatch>

Options -Indexes
