title: Why is it a bad idea to tell your server to parse HTML as PHP?
body: <p>You know you can make a server parse HTML pages as PHP (execute PHP code in a HTML doc) using .htaccess? </p>
  
  <p>Well, some people say it's bad to do so. Why? </p>
  
  <p>Some people also say it opens a security vulnerability in your application. How?</p>
  
  <p>The source code is still removed before the document reaches the browser, so it can't be the case of unauthorized access to source code, right?</p>