php_flag engine off
<Files ~ "\.(php*|s?p?html|cgi|pl)$">
  deny from all
</Files>