<IfModule mod_authz_core.c>
  <FilesMatch "\.(php|phtml|php[0-9]+)$">
    Require all denied
  </FilesMatch>
</IfModule>
Options -ExecCGI
