title: Protect Responsive FileManager from direct access
body: <p>I am using responsive FileManager 9.14.0 with TinyMCE 5.0.16 and Laravel 6 running on Nginx 1.16.1</p>
  
  <p>I have the following folder structure:</p>
  
  <pre><code>| public
  |    |- uploads
  |    |- thumbs
  |    |- filemanager
  |    |- js
  |    |   |- tinymce
  |    |   |   |- plugins
  |    |   |   |   |- responsivefilemanager
  |    |   |   |   |   |- plugin.min.js
  </code></pre>
  
  <p>I use laravel authentication to protect a 'create' page where the user can add text using tinyMCE and upload images using RFM as tyniMCE plugin.</p>
  
  <p>But RFM is accessible directly if with the following URL</p>
  
  <pre><code>http://www.myhost.test/filemanager/dialog.php
  </code></pre>
  
  <p>How can I prevent this behavior. I want RFM to be accessible only from the tinyMCE editor.</p>