# 炎酷CMS Nginx 伪静态与保护规则
# 使用方法：宝塔面板 -> 网站 -> 设置 -> 伪静态，粘贴以下内容保存

location / {
    if (!-e $request_filename) {
        rewrite ^/(en|tw)/?$ /index.php?lang=$1 last;
        rewrite ^/(en|tw)/message/$ /index.php?lang=$1&msg=1 last;
        rewrite ^/(en|tw)/col-([0-9]+)(-([0-9]+))?\.html$ /index.php?lang=$1&col=$2&p=$4 last;
        rewrite ^/(en|tw)/art-([0-9]+)\.html$ /index.php?lang=$1&art=$2 last;
        rewrite ^/(en|tw)/page-([a-zA-Z0-9_]+)\.html$ /index.php?lang=$1&page=$2 last;
        rewrite ^/(en|tw)/([a-zA-Z0-9_]+)\.html$ /index.php?lang=$1&page=$2 last;
        rewrite ^/(en|tw)/([a-zA-Z0-9_-]+)/$ /index.php?lang=$1&col_flag=$2 last;
        rewrite ^/(en|tw)/([a-zA-Z0-9_-]+)/([0-9]+)/$ /index.php?lang=$1&col_flag=$2&p=$3 last;
        rewrite ^/zh/(.*)$ /$1 permanent;
        rewrite ^/sitemap\.xml$ /index.php?sitemap=xml last;
        rewrite ^/sitemap\.txt$ /index.php?sitemap=txt last;
        rewrite ^/sitemap\.html$ /index.php?sitemap=html last;
        rewrite ^/robots\.txt$ /index.php?robots=1 last;
        rewrite ^/message/$ /index.php?msg=1 last;
        rewrite ^/col-([0-9]+)(-([0-9]+))?\.html$ /index.php?col=$1&p=$3 last;
        rewrite ^/art-([0-9]+)\.html$ /index.php?art=$1 last;
        rewrite ^/page-([a-zA-Z0-9_]+)\.html$ /index.php?page=$1 last;
        rewrite ^/([a-zA-Z0-9_]+)\.html$ /index.php?page=$1 last;
        rewrite ^/([a-zA-Z0-9_-]+)/$ /index.php?col_flag=$1 last;
        rewrite ^/([a-zA-Z0-9_-]+)/([0-9]+)/$ /index.php?col_flag=$1&p=$2 last;
    }
}

# 上传目录仅静态输出（禁止 PHP 执行）
location ^~ /uploads/ {
    location ~* \.(php|php3|php4|php5|phtml|pht|phar|cgi)$ {
        deny all;
    }
}

# 后台公共文件禁止直接访问
location ^~ /admin/inc/ {
    deny all;
}

# 禁止外部访问敏感目录
location ~ ^/(data|cache|inc)/ {
    deny all;
}

# 禁止直接访问模板文件（内含 PHP 源码；template/assets 公共静态资源不受影响）
location ~ ^/template/(header|footer|banner|block|page_tpl|list_tpl)/ {
    deny all;
}

# 禁止访问 data/config.php 等敏感文件
location ~* (\.user\.ini|data/config\.php) {
    deny all;
}
