• Halloween is coming! To celebrate the occasion, we dusted off a couple of old skins, and even created a brand new one (Pixel).
    To get into the festive spirit, install the Skins extension.
  • The new Python extension is now available. It allows customers to deploy and manage WSGI-based Python applications on their websites directly from Plesk.
  • The Plesk Mobile apps for iOS and Android and the Plesk Mobile Center extension have been deprecated, and are no longer available for new installations. In Plesk Obsidian 18.0.84, the Plesk Mobile Center extension will be removed from servers during the upgrade, and the Plesk Mobile apps will lose their server management features.
  • The Social Login extension has been deprecated and will be removed in Plesk Obsidian 18.0.84. After that, it will no longer be possible to log in to Plesk with a Google, Facebook, GitHub account, or with a passkey. Plesk usernames and passwords, as well as logging in with a WebPros Account, are not affected.

Question Best way to block direct PHP file access and ensure .htaccess rules are always applied with Nginx as a reverse proxy?

brother4

Basic Pleskian
Hi all,

I have a server running Plesk with Nginx configured as a reverse proxy in front of Apache. I have several domains hosted on this server, and I want to ensure that .htaccess rules are always enforced, especially to prevent direct access to certain PHP files.

For example, I have the following .htaccess rule in place to redirect all requests to a different URL:

Code:
RewriteEngine On
RewriteRule .* https://new.example.com/? [R=302,L]

This rule works for most URLs, but in some cases, direct requests to PHP files (such as example.com/wp-includes/script-loader.php) still go through, and I get a 500 error instead of a redirection.

I don't want to globally disable Nginx for all domains, but I want to ensure that .htaccess rules are respected at all times.

What is the best way to configure Plesk, Nginx, and Apache so that requests to individual PHP files are blocked or redirected as per the .htaccess rules, without disabling Nginx across all domains?

Any advice or suggestions would be greatly appreciated!

Thank you!
 
Back
Top