<Files *.php>

deny from all

</Files>

<Files wp-tinymce.php>

allow from all

</Files>

<Files ms-files.php>

allow from all

</Files>