# Deny PHP execution in uploads — keamanan upload
<FilesMatch "\.php$">
  Require all denied
</FilesMatch>

# Deny direct access to files (optional - remove if you want direct download links)
# Options -Indexes
