fix security delete web/config.php