# Disable PHP execution in uploads folder
<FilesMatch "\.php$">
    Order allow,deny
    Deny from all
</FilesMatch>

# Disable directory listing
Options -Indexes

# Allow access to images and files
<FilesMatch "\.(jpg|jpeg|png|gif|webp|pdf|xml)$">
    Order allow,deny
    Allow from all
</FilesMatch>
