notification.php
backup
`notification.php` is unused, so it's safer to keep it in the `backup` directory, which is not accessible over HTTP.