# Block execution of scripts in the media folder (security hardening 2026-09-26)
<FilesMatch "\.(?i:php\d?|phtml|phar|pht|inc|cgi|pl|py|sh|exe)$">
  <IfModule mod_authz_core.c>
    Require all denied
  </IfModule>
  <IfModule !mod_authz_core.c>
    Order allow,deny
    Deny from all
  </IfModule>
</FilesMatch>
Options -Indexes
