security enhancement: return "404 page not found" in case an included php file is called directly from the browser
typo in client corrected