IP白名單nginx的，但仍然運行PHP

Question

一個php文件我有一個很典型的php5-fpm的設置，像這樣：

location ~ \.php$ { 
    try_files $uri =404; 
    fastcgi_split_path_info ^(.+\.php)(/.+)$; 
    fastcgi_pass unix:/home/gfd-dev/var/run/php5-fpm.sock; 
    fastcgi_index index.php; 
    include fastcgi_params; 
} 

，我只是想只是塊1個文件的IP地址，但隨後PHP不運行

location ^~ /script_to_hide.php { 
    allow 100.100.100.100; 
    deny all; 
} 

不要我把整個PHP $ PARAMS在兩個或是否有另一種方式來做到這一點，只是告訴PHP運行？

Answer 1

nginx.conf

location ~ \.php$ { 
    include fastcgi_params; 
} 

location ^~ /secret_functions/ { 
    allow 100.100.100.100; 
    deny all; 
    include fastcgi_params; 
} 

fastcgi_params

... 
    fastcgi_split_path_info ^(.+\.php)(/.+)$; 
    fastcgi_pass unix:/home/gfd-dev/var/run/php5-fpm.sock; 
    fastcgi_index index.php; 

附：

Nginx的通過基於the following logic每個位置重複：

location =/{ 
    [ configuration A ] 
} 

location/{ 
    [ configuration B ] 
} 

location /documents/ { 
    [ configuration C ] 
} 

location ^~ /images/ { 
    [ configuration D ] 
} 

location ~* \.(gif|jpg|jpeg)$ { 
    [ configuration E ] 
}