httpd.conf
Your httpd.conf specifies how to handle certain file types.
You should be able to disable from here.
One issue however would be if they made a change in their .htaccess file.
Normally this would not take place until Apache was restarted...
good question ... doing some permissions may help here as well.