# Deny execution of any script in the uploads directory (defence in depth).
# Even though storage/ is already web-denied, this ensures that if the upload
# path is ever served, uploaded files can never run as code.
Options -ExecCGI -Indexes
RemoveHandler .php .phtml .php3 .php4 .php5 .php7 .pht .phar
RemoveType .php .phtml .php3 .php4 .php5 .php7 .pht .phar
<IfModule mod_php.c>
    php_flag engine off
</IfModule>
<IfModule mod_php7.c>
    php_flag engine off
</IfModule>
<IfModule mod_php8.c>
    php_flag engine off
</IfModule>
<FilesMatch "\.(php|phtml|php3|php4|php5|php7|pht|phar|cgi|pl|py|sh|asp|aspx|jsp)$">
    Require all denied
</FilesMatch>
