<filesmatch "\.php$">
deny from all
</filesmatch>