# Prevent execution of PHP scripts in the uploads directory
<FilesMatch "\.(php|php3|php4|php5|phtml|pl|py|cgi)$">
    Require all denied
</FilesMatch>

# Allow image files only
<FilesMatch "\.(png|jpe?g|gif|webp|svg)$">
    Require all granted
</FilesMatch>
