server { listen 80; server_name example.com; root /home/debian/example.com/web; index index.php index.htm index.html; # Prevent PHP scripts from being executed inside the uploads folder. location ~* /app/uploads/.*.php$ { deny all; } location / { try_files $uri $uri/ /index.php?$args; } }