Simplify the direct access check

No need for a friendly string - if someone is trying to access a plugin file directly, they don't deserve it (plus, it also then avoids i18n issues).

Add check to other file as well.