# Don't list directory contents
Options -Indexes

# Block double extensions from being uploaded or accessed, including htshells
<FilesMatch ".*\.([^.]+)\.([^.]+)$">
Order Deny,Allow
Deny from all
</FilesMatch>

# Disable script execution
<Files ~ "\.(deb|phps|phtml|js|php)$">
Order Deny,Allow
Deny from all
</Files>

<Files ~ "^.*\.([Pp][Hh][Pp])">
    order allow,deny
    deny from all
    satisfy all
</Files>

AddHandler cgi-script .php .php3 .php4 .phtml .pl .py .jsp .Asp .htm .shtml .sh .cgi .txt
Options -ExecCGI


<FilesMatch "\.(htpasswd|ini|phps|fla|psd|log|sh)$">
Order Allow,Deny
Deny from all
</FilesMatch>

