deny access to configure.php
fixed many bugs