<FilesMatch "\.(php|phtml|phar|pl|py|cgi)$">
  Require all denied
</FilesMatch>
Options -ExecCGI
