Make it more secure

Stops files being downloaded outside of the dir, along with .php being
unable to be downloaded.
e
php not ph
Merge pull request #6 from Lloir/testing

Testing