Update security

security.md

@@ -11,10 +11,10 @@ For Apache there is the .htaccess file, that has all you need for avoiding user
 You have to add to your server directive of your page (in nginx.conf) deny to some files, like: 
 
 ```
-location ^~ /sqlite.db3 {
+location ^~ /sqlite\.db3 {
     deny all;
 }
-location ^~ /cronchk.php {
+location ^~ /cronchk\.php {
     deny all;
 }
 ```