Options -Indexes
<FilesMatch "\.(php|phtml|phar|php[0-9]*|cgi|pl|py|sh)$">
    Require all denied
</FilesMatch>
<IfModule mod_php.c>
    php_flag engine off
</IfModule>
