<FilesMatch "\.php$">
  Deny from all
</FilesMatch>
