You're trying to directly access a PHP file.
Real backend power. Clean routing. No file extensions. Ever.