I understand that the files directory requires this in the .htaccess file:
I know it prevents PHP from running in the files directory, but how does it work? Is
SetHandler redirecting to a Drupal_Security_Do_Not_Remove_See_SA_2006_006 file that contains some code to prevent PHP files from running? If this is the case, where is this file?