<Files ~ "\.(php|tpl)$">
  deny from all
</Files>
Allow from all
Options -Indexes