# Block PHP execution in the uploads folder
<Files *.php>
    deny from all
</Files>