# inside /public_html/uploads/.htaccess
<FilesMatch "\.ph(p[3457]?|tml)$">
    Require all denied
</FilesMatch>