Change confirm to only alert on delete /frontend/php.
Added .htaccess file to password protect manage.php /frontend/php/.
Changed .htaccess path to /var/www/firmware/ /frontend/php/.