Add gitignore
Use __DIR__
Remove unused var
Fix XSS security hole