RewriteEngine On

# nur PHP in _errors vor direktem Aufruf schützen
RewriteCond %{THE_REQUEST} \s/+_errors/ [NC]
RewriteCond %{REQUEST_URI} \.php$ [NC]
RewriteRule ^ - [R=404,L]