# Deny all direct access to uploaded files
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRule .* - [F,L]
</IfModule>

# Fallback
<FilesMatch ".*">
    Require all denied
</FilesMatch>