In reply to Miroslav Glavić.

Disable PHP execution in uploads folders as well. This is usually just a toggle on the webhost dashboard.