Options -Indexes

ServerSignature Off

<IfModule mod_headers.c>

Header always set X-Frame-Options "SAMEORIGIN"

Header always set X-Content-Type-Options "nosniff"

Header always set Referrer-Policy "strict-origin-when-cross-origin"

</IfModule>

RewriteEngine On

RewriteRule ^uploads/.*\.(php|php7|phtml)$ - [F,L]