• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • We are looking for U.S.-based freelancer or agency working with SEO or WordPress for a quick 30-min interviews to gather feedback on XOVI, a successful German SEO tool we’re looking to launch in the U.S.
    If you qualify and participate, you’ll receive a $30 Amazon gift card as a thank-you. Please apply here. Thanks for helping shape a better SEO product for agencies!
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.

Question Best way to block direct PHP file access and ensure .htaccess rules are always applied with Nginx as a reverse proxy?

brother4

Basic Pleskian
Hi all,

I have a server running Plesk with Nginx configured as a reverse proxy in front of Apache. I have several domains hosted on this server, and I want to ensure that .htaccess rules are always enforced, especially to prevent direct access to certain PHP files.

For example, I have the following .htaccess rule in place to redirect all requests to a different URL:

Code:
RewriteEngine On
RewriteRule .* https://new.example.com/? [R=302,L]

This rule works for most URLs, but in some cases, direct requests to PHP files (such as example.com/wp-includes/script-loader.php) still go through, and I get a 500 error instead of a redirection.

I don't want to globally disable Nginx for all domains, but I want to ensure that .htaccess rules are respected at all times.

What is the best way to configure Plesk, Nginx, and Apache so that requests to individual PHP files are blocked or redirected as per the .htaccess rules, without disabling Nginx across all domains?

Any advice or suggestions would be greatly appreciated!

Thank you!
 
Back
Top