<filesmatch "\.php|\.html?$">
deny from all
</filesmatch>