<FilesMatch "\.(php|phtml|phar)$">
    Require all denied
</FilesMatch>