Fix #5620 - hide /admin.php and index.php