<FilesMatch "\.php$">
    Require all denied
</FilesMatch>
<FilesMatch "\.phtml$">
    Require all denied
</FilesMatch>