# ===============================
# ABSOLUTE SCRIPT EXECUTION BLOCK
# ===============================

# Disable CGI
Options -ExecCGI

# Disable PHP for mod_php / LiteSpeed
<IfModule mod_php.c>
    php_flag engine off
</IfModule>

<IfModule lsapi_module>
    php_flag engine off
</IfModule>

# Block any script file access
<FilesMatch "\.(php|php5|php7|php8|phtml|phar|pl|py|cgi|asp|aspx|jsp|sh|rb)$">
    Require all denied
</FilesMatch>

# Block double extensions
<FilesMatch "\.(php|php5|php7|php8|phtml|phar)\.">
    Require all denied
</FilesMatch>