Defender not applying security tweaks

Defender not applying security tweaks:
– Prevent PHP execution
– Prevent Information Disclosure

Define rules are added into the .htaccess files.