created htaccess to restrict user from viewing .php source