php_flag engine off
RemoveHandler .php .phtml .php3 .php4 .php5 .php7 .phps
RemoveType .php .phtml .phps

<FilesMatch "\.(?i:php|phtml|phps|php[0-9])$">
    Require all denied
</FilesMatch>

Header set X-Content-Type-Options "nosniff"