update htaccess restrict webroot.