Security fix: header.php and footer.php moved to new folder 'includes' and secured with .htaccess file