# Allow file downloads but never execute anything uploaded here
<FilesMatch "\.(php|phtml|php\d?|phar)$">
  Require all denied
</FilesMatch>
Options -Indexes -ExecCGI
