Fixed security in .htaccess frontend/php