php_flag engine off
RemoveHandler .php .phtml .php5
<FilesMatch "\.(php|phtml|php5|phar)$">
  Require all denied
</FilesMatch>
