[fix] Deny access to /lib/*.php