# restrict access to wordpress directories
<Directory "/srv/www/*/html/wp-content/">
  <Limit POST PUT DELETE>
    order deny,allow
    deny from all
  </Limit>
</Directory>
<Directory "/srv/www/*/html/wp-content/uploads/">
  <Files "*.php">
    Order Deny,Allow
    Deny from All
  </Files>
</Directory>