# Guest-uploaded photos live here. Never let PHP execute out of this folder —
# this is what stops someone uploading a disguised .php file as an "image".
<FilesMatch "\.(php|phtml|php\d?)$">
    Require all denied
</FilesMatch>
