Configure your webserver to not execute PHP code.