On Tue, 2012-04-17 at 15:56 -0700, Cliff Wells wrote: > On Wed, 2012-04-18 at 00:17 +0200, Silvio Siefke wrote: > > > location ~ /\.ht { > > deny all; > > } > > This also matches .html files. Try making your regex more explicit. My mistake, it doesn't. Check these: 1) file/directory permissions are correct 2) is the php app is setting the status to 403? Regards, Cliff