# Uploaded files are always saved as processed .jpg by our upload handler,
# but this blocks any script execution here as an extra safety net.
<FilesMatch "\.(php|phtml|php\d)$">
    Require all denied
</FilesMatch>
