nginx 禁止某些目录执行php
location ~ /(template|attachment|upload)/.*\.(php|php5|PHP|PHP5)?$ {
deny all;
}
在静态文件目录，如mov|center|static|zone|jkb|000|a_img
查找有没有莫名其妙的php文件
find ./ -name "*.php"
需要禁用的函数
disable_functions = phpinfo,eval,passthru,exec,system,chroot,scandir,chgrp,chown,shell_exec,proc_open,proc_get_status,ini_alter,ini_alter,ini_restore,dl,pfsockopen,openlog,syslog,readlink,symlink,popepassthru,stream_socket_server,fsocket,fsockopen