refactoring helper scripts to improve security and protect /includes and /helper-server