[security improvement] moved db file to folder, added .htaccess to prevent SQLite database file from being downloaded and blocked folder access