Some configuration files in the web project, such as ini files, cfg files, or static template dwt, lbi files, etc., need to be set to prohibit access, otherwise they can be downloaded directly from the browser.
location ~* \.(ini|cfg|dwt|lbi)$ { deny all; }
The above introduces nginx's prohibition on accessing files with certain suffixes, including the content. I hope it will be helpful to friends who are interested in PHP tutorials.