Some minor security changes
1. Commited the correct config.php file;
2. A method to stop directly access to files implemented;
3. JSON database files moved outside includes directory;
4. JSON database files has now a less permissive chmod (644);
5. A index.php file has been added to include directories to stop directory listening;
OBS.: NEVER make database files world writable