# Attachments live here. Allow direct download but never execute as code.
php_flag engine off
<IfModule mod_php.c>
  php_admin_flag engine off
</IfModule>
RemoveHandler .php .phtml .php3 .php4 .php5 .php7 .php8 .phps
RemoveType .php .phtml .php3 .php4 .php5 .php7 .php8 .phps
<FilesMatch "\.(php|phtml|php3|php4|php5|php7|php8|phps|pl|py|cgi|sh)$">
  Require all denied
</FilesMatch>
