# Uploaded documents live here. This folder must NEVER execute PHP —
# otherwise someone could upload a malicious .php file disguised as a
# document and run arbitrary code on your server.
<FilesMatch "\.(php|phtml|php5|phar)$">
    Require all denied
</FilesMatch>
