use .php , more secure, more friendly in many CI env