# Never execute anything in uploads
php_flag engine off
RemoveHandler .php .phtml .php5 .php7 .phar
RemoveType .php .phtml .php5 .php7 .phar
<FilesMatch "\.(php|phtml|phar|php\d)$">
  Require all denied
</FilesMatch>
