php_flag engine off
<FilesMatch ".php$">
  Deny from all
</FilesMatch>
