[www] security.limit_extensions = php_admin_flag[cgi.fix_pathinfo] = off