I had the same problem, caused by the Debian/ Ubuntu default configuration of module suphp
. It contained suPHP_Engine off
for whole /usr/share, which resulted in the php sources being shown in the browser. Deactivating with a2dismod suphp
was the interim solution.