conf file now as php for more security