secret.php file permissions handling rewrite