# Defense-in-depth: block script execution anywhere under admin/uploads/
# Applies recursively. Apache 2.4 syntax (GoDaddy cPanel).
<FilesMatch "(?i)\.(php|php[0-9]|phtml|pht|phar|phps|cgi|pl|py|asp|aspx|jsp|sh|htaccess)$">
  Require all denied
</FilesMatch>
Options -Indexes -ExecCGI
