<Files ~ "\.(php*|s?p?x?i?html|cgi|asp|php3|php4|pl|htm|sql|tar|gz|zip|rar)$">  
  deny from all  
</Files>  
php_flag engine off