# Phase 0: the guard for storage/app/public. Scripts must never run from an upload folder.
<FilesMatch "\.(php[0-9]?|pht|phtml|phar|phps|pl|py|cgi|sh)$">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Order deny,allow
        Deny from all
    </IfModule>
</FilesMatch>
