Strengthening wp-includes and wp-content/uploads security