Update httpd config to sevre php files

el9/templates/httpd-configmap.yaml

@@ -118,7 +118,25 @@ data:
         Require all denied 
     </Files>
 
-    AddType application/x-httpd-php .php
+    # The following lines prevent .user.ini files  (PHP config files) from being viewed by Web clients.
+    <Files ".user.ini">
+        Require all denied
+    </Files>
+
+    # Allow php to handle Multiviews
+    AddType text/html .php
+
+    # Redirect to local php-fpm (no mod_php in default configuration)
+    <FilesMatch ".+\.php$">
+        # To avoid executing something unexpected it is critical to verify that the file
+        # actually exists in the filesystem!
+        # cf. https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=115522405
+        <If "-f %{REQUEST_FILENAME}">
+            # Enable http authorization headers
+            SetEnvIfNoCase ^Authorization$ "(.+)" HTTP_AUTHORIZATION=$1
+            SetHandler "proxy:unix:/run/php-fpm/www.sock|fcgi://localhost"
+        </If>
+    </FilesMatch>
 
     <IfModule mime_module>
         TypesConfig /etc/mime.types