# Prevent PHP execution in upload directory
<FilesMatch "\.php$">
    Deny from all
</FilesMatch>

# Prevent script execution via Apache handler
AddType application/octet-stream .php .php5 .phtml
