Deny access to the upload folder so the upload files are safe.