note 8616 added to Apache module

The AddType application/x-httpd-php .php AddType application/x-httpd-php-source .phps can be put into a virtualhost directive. If not also specified in the root config, this would mean that php files could only be executed by certain virtual hosts. In my case, I control certain virtual domains and I am willing to allow my php code to run there, but I'm not willing to allow php code to run from virtual hosts I don't control. By also not allowing users to override fileinfo, my belief is that I can isolate the ability to run php to certain virtual hosts (these hosts cannot run CGI, either). http://www.php.net/manual/security.apache.php