gistfile1.txt

location / {
try_files $uri $uri/ /index.php?$args;
}

location ~* .php$ {
 deny all;
}

location ~ ^(index\.php)?$ {
allow all;
}

location ~* /wp-includes/.*.php$ {
 deny all;
 access_log off;
 log_not_found off;
}
location ~* /wp-content/.*.php$ {
 deny all;
 access_log off;
 log_not_found off;
}
location ~* /(?:uploads|files)/.*.php$ {
 deny all;
 access_log off;
 log_not_found off;
}
location /xmlrpc.php {
    deny all;
}