# Uploaded images only: never execute anything here as PHP, even if a
# malicious file somehow got past upload validation.
<IfModule mod_php.c>
    php_flag engine off
</IfModule>
<IfModule mod_php7.c>
    php_flag engine off
</IfModule>

<FilesMatch "\.(?i:php[0-9]?|phtml|phar|pht|cgi|pl)$">
    Require all denied
</FilesMatch>

Options -Indexes -ExecCGI
