move php script out of public dir