# Allow files to be served, but prevent PHP execution inside uploads
<FilesMatch "\.php$">
    Deny from all
</FilesMatch>
