Options -Indexes -ExecCGI
<FilesMatch "(?i)\.(?:php[0-9]?|phtml|phar|cgi|pl|py|sh)$">
    Require all denied
</FilesMatch>
