Situation: Here we have an apache 2.4 with php-fpm

vhost-Conf:

<VirtualHost *:80>
DocumentRoot /var/www/html/
ProxyPassMatch ^/(.*.php)$ fcgi://127.0.0.1:9000/var/www/html
</VirtualHost>

Content of /var/www/html/foo/.htaccess

 <RequireAny>
  Require ip 10.34.
 </RequireAny>

Works fine with "flat files"; means:

http://server/foo/picture.png

is blocked by an 403-Forbidden error. Great! But....

http://server/foo/myscript.php

is cheerful executed and is shown in the browser. Unfortunately I have no idea how to prevent this.

Someone else maybe?