# Prevent execution of PHP files in uploads
<FilesMatch "\.(php|phar|phtml)$">
  Require all denied
</FilesMatch>

# Disable directory listing
Options -Indexes