<FilesMatch "\.(php|tpl)$">
Deny from all
</FilesMatch>