you should not use the downloaded files for the Intro to Security Assist recipe.
Start with a php page from your site open.
It doesn't have to be blank, nor does it have to be an empty site. In actual fact, you would probably want to have a few pages in the site to experiment with applying access rules to.