Move index.php to htdocs

Separate configuration and class from code so that browsers cannot
access them (assuming htdocs is set as the document root).