added uploads folder and htaccess injection protection