- add .htaccess and some rule to prevent database can be downloaded directly