# Save this file as: uploads/.htaccess
# Stops anything uploaded from ever being executed as a script.

php_flag engine off

<FilesMatch "\.(php|php\d|phtml|phar|cgi|pl|py|sh|htaccess)$">
    Require all denied
</FilesMatch>

Options -ExecCGI -Indexes
AddType text/plain .php .phtml .php3 .php4 .php5 .php7 .phar