Options -Indexes
# Uploaded files must never execute
<FilesMatch "\.(php|phtml|php\d|cgi|pl|py|sh)$">
  Require all denied
</FilesMatch>
