Options -Indexes -ExecCGI

# Block any script-like extensions
<FilesMatch "\.(php|phtml|phar|php[0-9]?|cgi|pl|py|jsp|asp|aspx|sh|shtml)$">
  Require all denied
</FilesMatch>

# Block hidden files
<FilesMatch "^\.">
  Require all denied
</FilesMatch>
