Options -Indexes -ExecCGI
<FilesMatch "\.(php[0-9]?|phtml|phar|cgi|pl|py|sh|html?|shtml|svg)$">
  Require all denied
</FilesMatch>
