improved security of config.inc.php