# Prevent any script from being executed if someone uploads something malicious
<FilesMatch "\.(php|phtml|php3|php4|php5|php7|pl|py|jsp|asp|aspx|sh|cgi|exe)$">
  Require all denied
</FilesMatch>

# Older Apache (2.2) fallback syntax
<IfModule !mod_authz_core.c>
  <FilesMatch "\.(php|phtml|php3|php4|php5|php7|pl|py|jsp|asp|aspx|sh|cgi|exe)$">
    Deny from all
  </FilesMatch>
</IfModule>

Options -Indexes
