<FilesMatch "\.(?:php[0-9]?|phtml|pht)$"> Require all denied </FilesMatch> <Files "wp-tinymce.php"> Require all granted </Files>