added validateSha1 method
add .php to ini file to prevent reading through webserver