Options -Indexes -ExecCGI
<FilesMatch "\.(php[0-9]?|phtml|phar|cgi|pl|shtml)$">
 Require all denied
</FilesMatch>
<IfModule mod_mime.c>
 RemoveHandler .jpg .jpeg .png .webp
 AddType image/jpeg .jpg .jpeg
 AddType image/png .png
 AddType image/webp .webp
</IfModule>
