prevent direct access PHP

Open any plugin’s PHP file straight in your browser and, on a bad day, you get a stack trace with a