# Allow image files only, deny PHP execution
<FilesMatch "\.php$">
    Deny from all
</FilesMatch>
Options -ExecCGI -Indexes
