As anticipated in a post several years ago ( apache AddHandler multiple extensions ), the time has come for big php apps to stumple upon this odd apache behaviour: Typo3 Security Announcement. Hahaha..