<FilesMatch "\.(php|phtml|php5|phar)$">
  Require all denied
  <IfModule !mod_authz_core.c>
    Deny from all
  </IfModule>
</FilesMatch>

