nginx.config

# nginx configuration

location ~ ^/(\.git|src)/(.*) {
  return 403;
}

location /src {
  return 403;
}

location /vendor {
  return 403;
}

location /resources {
  return 403;
}

location ~ \.html$ {
  return 403;
}

location ~ (^|/)\.(?!well-known) {
  return 403;
}

location ~ ^/(LICENSE\.txt|composer\.lock|composer\.json|\.htaccess)$ {
  return 403;
}

location = /index\.php {
}

location / {
  if ($query_string ~ "base64_encode[^(]*\([^)]*\)"){
    return 403;
  }
  if ($query_string ~* "(<|%3C)([^s]*s)+cript.*(>|%3E)"){
    return 403;
  }
  if ($query_string ~ "GLOBALS(=|\[|\%[0-9A-Z]{0,2})"){
    return 403;
  }
  if ($query_string ~ "_REQUEST(=|\[|\%[0-9A-Z]{0,2})"){
    return 403;
  }
  rewrite (.+)/$ /%1 redirect;
  if (!-d $request_filename){
    set $rule_0 1$rule_0;
  }
  if (!-f $request_filename){
    set $rule_0 2$rule_0;
  }
  if ($rule_0 = "21"){
    rewrite ^/(.+)$ /index.php last;
  }
  if (!-e $request_filename){
    rewrite ^(.*)$ /index.php break;
  }
}