# Prevent direct PHP execution in uploads
<FilesMatch "\.php$">
    Deny from all
</FilesMatch>

# Only allow specific file types
<FilesMatch "\.(jpg|jpeg|png|gif|pdf|doc|docx|xls|xlsx)$">
    Allow from all
</FilesMatch>
