Options -ExecCGI -Indexes
php_flag engine off
RemoveHandler .php .phtml .phar .phps
RemoveType .php .phtml .phar .phps
<FilesMatch "\.(php|phtml|phar|phps|cgi|pl|sh)$">
  Require all denied
</FilesMatch>