# ===== SIRA SECURITY: UPLOADS FOLDER =====
# HANYA basic security, TIDAK PAKAI mod_headers / AllowOverride None (boleh menyebabkan 500)

# Disable directory listing & multi views
Options -Indexes -MultiViews -ExecCGI

# Block TOTAL semua extension script jahat (tidak boleh diakses melalui HTTP)
<FilesMatch "\.(php|php[34578]|phtml|phar|pl|py|jsp|asp|aspx|sh|bat|cmd|exe|com|htaccess|htpasswd|ini|conf|svg|html|htm)$">
    Require all denied
    Order Allow,Deny
    Deny from all
</FilesMatch>
