put protected out of htdocs(i.e. the webroot), local server is working, remote server is not working