Samizdata - 12:35 am on Feb 24, 2012 (gmt 0)
why do you want the request to come through as a 200 instead of a bona fide 403?
I would guess that the PHP file contains this:
header("HTTP/1.1 403 Forbidden");
which uses fewer bytes than a custom 403 page designed for humans.