Chmod 600 does not protect my files

As apache is running on your username, chmod 600 does not deny access to the html / php file. You will need to set permissions to 0 on such files to deny access. Other file types (zip, jpg and others) can be protected with 600 permissions without problems as they are not parsed by the web server.

Brighten someone's day!