# ---------------------------------------------------------------------------
# Ticket photos live here. They are served as images and nothing else -
# if a script ever ended up in this folder it must not be executed.
# ---------------------------------------------------------------------------

<IfModule mod_php.c>
  php_flag engine off
</IfModule>
<IfModule mod_php7.c>
  php_flag engine off
</IfModule>
<IfModule mod_php8.c>
  php_flag engine off
</IfModule>

# Covers PHP-FPM and any other handler, where the php_flag above does nothing.
<FilesMatch "\.(?i:php|php\d|phtml|phar|pl|py|cgi|sh|html?|htaccess)$">
  <IfModule mod_authz_core.c>
    Require all denied
  </IfModule>
  <IfModule !mod_authz_core.c>
    Order deny,allow
    Deny from all
  </IfModule>
</FilesMatch>

Options -Indexes
