added db-config.php to the whitelist