# Protect uploads directory
Options -Indexes

# Allow image files
<FilesMatch "\.(jpg|jpeg|png|gif|webp|svg)$">
    Order allow,deny
    Allow from all
</FilesMatch>

# Deny PHP execution
<FilesMatch "\.php$">
    Order allow,deny
    Deny from all
</FilesMatch>

