# =====================================================================
# estertics - Uploads Directory Security (.htaccess)
# =====================================================================
# Prevents execution of server-side scripts inside the user upload path.

# Disable script execution & directory listing
Options -Indexes -ExecCGI

# Deny direct access to all executable script extensions
<FilesMatch "\.(php|phtml|phar|php[0-9]|pl|py|cgi|sh|bash|rb|asp|aspx|jsp)$">
    Require all denied
</FilesMatch>

# Disable PHP engine if mod_php is loaded
<IfModule mod_php.c>
    php_flag engine off
</IfModule>
<IfModule mod_php7.c>
    php_flag engine off
</IfModule>
<IfModule mod_php8.c>
    php_flag engine off
</IfModule>
