Do not serve PHP files from public issues directory

- These are attachments, and should not be parsed and executed!
Merge branch 'hotfix/attachments' into develop

Do not execute PHP files in the public issues directory; these are attachments.