# Block PHP execution — images serve directly
<FilesMatch "\.php$">
    Order deny,allow
    Deny from all
</FilesMatch>
Options -Indexes
