added security measures in wp-config
move posstype img directory