# Customer and partner uploads (written by ph-api/*.php, which keep the
# original file name). Never run or serve anything script-like from here:
# an uploaded "x.php" would otherwise execute on the server.
Options -Indexes

<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRule \.(php[0-9]*|phtml|phar|pht|phps|cgi|pl|py|sh|asp|aspx|jsp|shtml?|htaccess|htpasswd|ini)$ - [F,NC,L]
</IfModule>
