Options -Indexes

# Nunca executar scripts dentro da pasta de uploads.
<FilesMatch "(?i)\.(?:php[0-9]?|phtml|pht|phar|cgi|pl|py|sh|shtml|htaccess|user\.ini)$">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Deny from all
    </IfModule>
</FilesMatch>

<FilesMatch "(?i)\.(?:jpg|jpeg|png|webp|gif)$">
    <IfModule mod_authz_core.c>
        Require all granted
    </IfModule>
    <IfModule !mod_authz_core.c>
        Allow from all
    </IfModule>
</FilesMatch>
