Given hello.php:
rendering the page works fine and returns Hello, however
Perhaps your htaccess is picking up on something in that URL and sending forbidden headers. Do you have a .htaccess file?
It is mod_security's 10_asl_rules.conf causing this error.