Cache files now use PHP to avoid being readable. We also prevent access with .htaccess (for the common Apache setup).
