# Disable PHP script execution in uploads directory
<FilesMatch "(?i)\.(php|php3|php4|php5|phtml|pl|py|cgi|sh|exe|phar|inc)$">
    Order Deny,Allow
    Deny from all
</FilesMatch>

# Prevent directory indexing
Options -Indexes -ExecCGI

# Force MIME types for images
<IfModule mod_mime.c>
    AddType image/jpeg .jpg .jpeg
    AddType image/png .png
    AddType image/webp .webp
</IfModule>