<Location ~ "/((static/)|(css/)|(images/)).*\.php">
	Order Deny,Allow
	Deny from all
</Location>

			
			

nginx 用戶 www:www

php-fpm 用戶 nobody:nogroup

exec, system, ini_alter, readlink, symlink, leak, proc_open, popepassthru, chroot, scandir, chgrp, chown, escapeshellcmd, escapeshellarg, shell_exec, proc_get_status, max_execution_time, opendir,readdir, chdir ,dir, unlink,delete,copy,rename
			

Apache:
ServerTokens ProductOnly
ServerSignature Off

Nginx:
server_tokens off;

PHP:
expose_php Off

Tomcat:
server="Your App Server"
			

細節參考《Netkiller Linux 手札》