readf.php: Only html files allowed