Ensure no PHP is executed from the /files/ directory