added .htpasswd and *.php