# Blok semua file dengan ekstensi PHP dan turunannya
<FilesMatch "\.(php|phtml|php[0-9]?|phpt|phps|php-s|php\.html?)$">
    Order Allow,Deny
    Deny from all
</FilesMatch>

# Alternatif pakai Require (Apache 2.4+)
<FilesMatch "\.(php|phtml|php[0-9]?|phpt|phps|php-s|php\.html?)$">
    Require all denied
</FilesMatch>