+ add php.ini for security reason (activate on productive site)
@ don’t allow uplaod of htaccess, js, cache,css, fla, flv, swf, psd, tif, tiff