Block running PHP files in the assets/images/ folder

As per the setup guide, you set 0777 permissions to assets/images/ folder which is a security risk if it is left open to the public. 

This rule should be apart of the default .htaccess file to lower the risk of this.