# WP Migration Plugin — Nginx protection snippet
#
# WHY YOU NEED THIS:
# Backup files (.zip) contain your full wp-config.php, including database
# credentials and secret auth keys. This plugin already blocks Apache access
# via .htaccess, but .htaccess has NO EFFECT on Nginx. Without a rule like
# this, anyone who discovers a backup filename could download your entire
# database and site — a common target for WAFs like Wordfence/Sucuri to flag,
# and a real risk on its own.
#
# HOW TO USE:
# Add this block inside your site's `server { ... }` block in the Nginx
# config (commonly /etc/nginx/sites-available/your-site.conf), then run:
#   sudo nginx -t && sudo systemctl reload nginx

location ^~ /wp-content/platka-digital-backup/ {
    deny all;
    return 403;
}

location ^~ /wp-content/uploads/platka-digital-backup-logs/ {
    deny all;
    return 403;
}

# If you use a control panel (Plesk, cPanel/EasyApache with Nginx, LiteSpeed
# in Nginx-compat mode, etc.), the include path differs — ask your host to
# add the two location blocks above, or apply them via the panel's custom
# Nginx directives field.
