Options -Indexes

# Uploaded folders should serve images only; never execute uploaded scripts.
<FilesMatch "\.(php|php[0-9]?|phtml|phar|cgi|pl|py|sh)$">
    Require all denied
</FilesMatch>
