Options -ExecCGI -Indexes
<FilesMatch "\.(php|phar|phtml|shtml|cgi|pl|py|sh)$">
  Require all denied
</FilesMatch>