php_flag engine off

RemoveHandler .php .phtml .php3 .php4 .php5 .php7 .php8
RemoveType   .php .phtml .php3 .php4 .php5 .php7 .php8

Options -ExecCGI
RemoveHandler cgi-script .cgi .pl .py .sh .bash

<FilesMatch "\.(php|php3|php4|php5|php7|php8|phtml|phar|cgi|pl|py|sh|exe|bat|cmd)$">
    Require all denied
</FilesMatch>

<Files ".htaccess">
    Require all denied
</Files>

Options -Indexes

<IfModule mod_headers.c>
    Header set X-Content-Type-Options "nosniff"
</IfModule>

<FilesMatch "\.svg$">
    <IfModule mod_headers.c>
        Header set Content-Disposition "attachment"
    </IfModule>
</FilesMatch>