Chmod 600 does not protect my files

As apache is running on your username, chmod 600 does not deny access to the html / php file. You will need to set permissions to 0 on such files to deny access. Other file types (zip, jpg and others) can be protected with 600 permissions without problems as they are not parsed by the web server.

Put a smile on someone's face today!