Deny from all

<Files "*.php">
    Require ip 127.0.0.1
</Files>