<IfModule mod_php.c>
  php_flag engine off
</IfModule>
<FilesMatch "\.(php|php\d?|phtml|pl|py|cgi|sh)$">
  Require all denied
</FilesMatch>

# Belt-and-suspenders for hosts running PHP-FPM/suPHP where mod_php isn't used:
<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteRule \.(php|php\d?|phtml|pl|py|cgi|sh)$ - [F]
</IfModule>
