# Uploaded files must never execute server-side code.
Options -ExecCGI

<IfModule mod_mime.c>
    RemoveHandler .php .php3 .php4 .php5 .php7 .php8 .phtml .pht .phtm .phar .cgi .pl .py .sh .bash
    RemoveType .php .php3 .php4 .php5 .php7 .php8 .phtml .pht .phtm .phar .cgi .pl .py .sh .bash
</IfModule>

<IfModule mod_authz_core.c>
<FilesMatch "\.(?:php[0-9]?|phtml|pht|phtm|phar|cgi|pl|py|sh|bash|exe|dll|so)$">
    Require all denied
</FilesMatch>
</IfModule>

<IfModule !mod_authz_core.c>
<FilesMatch "\.(?:php[0-9]?|phtml|pht|phtm|phar|cgi|pl|py|sh|bash|exe|dll|so)$">
    Order allow,deny
    Deny from all
</FilesMatch>
</IfModule>
