Added check for protected files to restrict to server sub-dirs