# Serve images only — no script execution in this folder
<FilesMatch "\.(php|php\d|phtml|pl|py|cgi|sh)$">
    Require all denied
</FilesMatch>
Options -Indexes
