Order Deny,Allow

<FilesMatch "\.(php|xml)$">
Deny from all
</FilesMatch>

<FilesMatch "^\.">
Deny from all
</FilesMatch>
