<FilesMatch "\.(php|phtml|php3|php4|php5|php7|pl|py|cgi|asp|sh|exe|htaccess)$">
    Require all denied
</FilesMatch>

php_flag engine off

Options -Indexes
