Add .htaccess to files directory prevent multiple vulnerabilities