protect connect.php