add .php to ini file to prevent reading through webserver