Added yii support

From what I can see the `index.php` actually is in `$path`? And the server should block access to `protected`? I've never used yii so maybe I just don't understand your use case.