Add .htaccess to avoid disclosure of scripts