# Allow images to be served directly, block PHP execution
Options -ExecCGI
php_flag engine off
AddType text/plain .php .php3 .php4 .php5 .phtml
<FilesMatch "\.(php|php3|php4|php5|phtml|pl|py|jsp|asp|sh|cgi)$">
    deny from all
</FilesMatch>
