# Uploaded files are data, never executable.
<IfModule mod_php.c>
  php_flag engine off
</IfModule>
<IfModule mod_php5.c>
  php_flag engine off
</IfModule>
SetHandler default-handler
Options -ExecCGI -Indexes

<FilesMatch "\.(?i:php|phar|phtml|php3|php4|php5|php7|phps|cgi|pl|py|jsp|asp|sh)$">
  Require all denied
</FilesMatch>