moved some methods into the Util class as static ones: get latest wp version & get tmp dir
removed htaccess info from stats module
fixed: stats module wasn't returning its data
added a file check Protect all files except admin-ajax.php which is used by plugins to send ajax calls.