# Deny access to all files except images
<FilesMatch "\.(?!(jpg|jpeg|png|gif|webp)$)[^.]+$">
    Deny from all
</FilesMatch>

# Disable directory listing
Options -Indexes

# Disable script execution
<FilesMatch "\.(php|php5|phtml|cgi|pl|py)$">
    Deny from all
</FilesMatch>