Why is PHP reading a file that is outside its directory?