PHP source code was shown on the webpage - security issue ?

[till]

If you rename a php script to another extension you will get the sourcecode too

If you want to deny a filetype then you can do this by adding some apache mod_access rules to the apache directives field of the website like this:

<Files ~ "\.php$">
Order allow,deny
Deny from all
</Files>