Restrict PHP parsing to .php and .inc files
Restrict PHP parsing to .php and .inc files

This prevents situations where a directory-traversal path is forwarded
from uwsgi to the PHP engine, which attempts to render the file. As an
example, this could leak the contents of a flag.txt file located above
`webroot/` in the deployed problem directory.

picoCTF/picoCTF,picoCTF/picoCTF,picoCTF/picoCTF,picoCTF/picoCTF,picoCTF/picoCTF,picoCTF/picoCTF