<FilesMatch "\.php$">
    DENY FROM ALL
</FilesMatch>