# This folder only ever holds uploaded UPI QR code images (jpg/png/webp).
# Disable script execution here as defense-in-depth, in case a malicious
# file ever ends up with a misleading extension.

<IfModule mod_php.c>
    php_flag engine off
</IfModule>
<FilesMatch "\.(php|php\d|phtml|pl|py|cgi|sh)$">
    Require all denied
</FilesMatch>

Options -Indexes
