Protect against php files being send as static files

[Olaf van der Spek]

Ian Hobson Wrote:
-------------------------------------------------------
> If you place your php files outside the main root directory, and
> then do something like this

That'd good but unfortunately not common practice.
It'd be nice to have better safety by default.

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,283274,283526#msg-283526