Options -Indexes
php_flag engine off
<FilesMatch "\.(php|php5|phtml|pl|py|cgi|sh)$">
  Require all denied
</FilesMatch>
