> That assumes you have a web server configured to serve PHP out of /var/www.

The example was for Apache webserver.

> At the very least you would want to put some access control in front of this.

You're right, access control would be in order. Though I was merely suggesting the fastest way to try it out.