Hardening WordPress: Disable PHP Execution in `wp-content/uploads`

[caption id="attachment_26281" align="alignnone" width="383"] wordpress[/caption] WordPress must be able to write media files to `wp-content/uploads`, but files stored there should never need to execute as PHP. This article explains how to block PHP-like files using a central Apache configuration, with `.htaccess` as an additional safety net. It also compares the advantages and limitations of both…