# Deny access to PHP files in specific directory

        location ~ /(wp-content|uploads|wp-includes|images|assets|theme)/.*\.php$ { deny all; }

代理设置

    location ^~ /theme/ {
        # 代理到远程文件服务器
        proxy_pass http://服务域名:服务端口/theme/;
        # 保留原始请求头信息
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    # assets
    location ^~ /assets/ {
        # 代理到远程文件服务器
        proxy_pass http://服务域名:服务端口/assets/;
        # 保留原始请求头信息
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    # 上传文件代理配置
    location ^~ /uploads/ {
        # 代理到远程文件服务器
        proxy_pass http://服务域名:服务端口/uploads/;
        # 保留原始请求头信息
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }