i know but Customers don't care about notifications
please help to prevent it with server config!
i know this way but i need a general solution.I wouldn't care about such "Customers" then also.
Try this https://lxadm.com/Apache:_disabling_PHP_execution_in_selected_directories or just google "disable php execution in directory".
<Directory */wp-content/uploads/* >
php_admin_value engine Off
</Directory>
Perhaps VirtualHost templates would give you some idea https://help.directadmin.com/item.php?id=2i know this way but i need a general solution.