you should return a 404 for other PHP files (the current code will return the PHP file source)