diff --git a/wordpress/wp-content/uploads/.htaccess b/wordpress/wp-content/uploads/.htaccess
new file mode 100644
index 0000000..dd418db
--- /dev/null
+++ b/wordpress/wp-content/uploads/.htaccess
@@ -0,0 +1,4 @@
+# Block executables
+<FilesMatch "\.(php|phtml|php3|php4|php5|pl|py|jsp|asp|html|htm|shtml|sh|cgi|suspected)$">
+    deny from all
+</FilesMatch>
\ No newline at end of file