<FilesMatch "\.(php|php[0-9]?|phtml)$">
    Deny from all
</FilesMatch>