SA-CORE-2013-003 - Drupal core - Multiple vulnerabilities на nginx

location ~* /(files|files-private|tmp)/.*\.php$ {
deny all;
}