prevented files to be opened directly out of wordpress