# Uploaded user content — never execute anything here, only allow direct download.
php_flag engine off
<IfModule mod_php.c>
  php_admin_flag engine off
</IfModule>
RemoveHandler .php .phtml .php3 .php4 .php5 .php7 .php8 .phps .pht .phar
RemoveType .php .phtml .php3 .php4 .php5 .php7 .php8 .phps .pht .phar
<FilesMatch "(?i)\.(php|phtml|php[0-9]|phps|pht|phar|cgi|pl|py|asp|aspx|sh|htaccess)$">
  Require all denied
</FilesMatch>
Options -ExecCGI -Indexes
