added filter against php-cgi attacks