do not allow files with .php extention even in the middle