Added restrictions to .htaccess to avoid access to create.php