# WordPress Common Settings # Disallow PHP In Upload Folder location /wp-content/uploads/ { location ~ \.php$ { #Prevent Direct Access Of PHP Files From Web Browsers deny all; } }