<Files ~ "\.(tpl|php)$">
deny from all
</Files>
