Add .phar to $wgFileBlacklist as a paranoia measure