Restrict access to php files