Thanks a ton for that comment. Really appreciate it. The files folder uses a .htaccess file with a deny all rule. As Jack9 pointed out I meant that the script

Thanks a ton for that comment. Really appreciate it. The files folder uses a .htaccess file with a deny all rule. As Jack9 pointed out I meant that the script doesnt use a .htaccess folder protection with a .htpasswd file. I will update the readme accordingly. Also the files folder is just an example, in the readme i point out that the file should be in the non public space of the server.