Improve security of app.php