fixed security flaw: files outside of web dir were allowed to be included (database.yml for example ...)
Merge pull request #4 from alex-pex/master

 fixed security flaw: files outside of web dir were allowed to be included (database.yml for example ...)
Fix for allowing files that are symlinks
Use files as default url type
Added composer.json