# Don't list directory contents
Options -Indexes

# Block double extensions from being uploaded or accessed, including htshells
<FilesMatch ".*\.([^.]+)\.([^.]+)$">
Order Deny,Allow
Deny from all
</FilesMatch>

# Disable script execution
<Files ~ "\.(deb|phps|phtml|js|php)$">
Order Deny,Allow
Deny from all
</Files>

