# Prevent execution of any script files that might get uploaded,
# and prevent directory listing / direct browsing of stored documents.

# Disable script execution in this directory
<FilesMatch "\.(php|php\d|phtml|pl|py|cgi|asp|aspx|sh|exe)$">
  Require all denied
</FilesMatch>

# Disable directory listing
Options -Indexes

# Deny direct access to everything by default; files should only be
# retrieved by an authenticated admin script (not included here) or
# downloaded manually via cPanel File Manager / FTP.
<IfModule mod_authz_core.c>
  Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
  Order allow,deny
  Deny from all
</IfModule>
