prevent accessing files outside docroot