remove direct php access in cli-server