Access denied for statistics pages

I can not understand what could be the problem. I can not access to statistics pages: PHP Opcode and Memcached statistics pages

I get "Access denied" when trying to open any page.

---

 

All of them: Memcached, PHP Info, Zend Opcache.

Only for Zend Opcache. And after I enter username/password, I get "Access denied". For Memcached and PHP Info pages i get "Access denied" immediately, without any prompts.

I know the login details, I saved it after installation.
I previously installed CentminMod on another VDS, and there were no problems with access to statistics pages. But now this problem has arisen, very strange, I do not understand where I made a mistake.

 

Oh, the problem bigger than I thought. I get "Access denied" when trying to open any .php file.
hostname.mydomain.com/any_file.php and mydomain.com/any_file.php - same result.

Code:

server {
    listen      80;
    server_name [ip_address_of_my_VDS];
    return      444;
}
server {
            listen 80 default_server backlog=4095 reuseport;
            server_name [hostname.mydomain.com];
            root   html;

        access_log              /var/log/nginx/localhost.access.log     combined buffer=256k flush=5m;
        error_log               /var/log/nginx/localhost.error.log      error;

# ngx_pagespeed & ngx_pagespeed handler
#include /usr/local/nginx/conf/pagespeed.conf;
#include /usr/local/nginx/conf/pagespeedhandler.conf;
#include /usr/local/nginx/conf/pagespeedstatslog.conf;

# limit_conn limit_per_ip 16;
# ssi  on;

        location /nginx_status {
        stub_status on;
        access_log   off;
        allow 127.0.0.1;
        #allow youripaddress;
        deny all;
        }

            location / {

# block common exploits, sql injections etc
#include /usr/local/nginx/conf/block.conf;

#Enables directory listings when index file not found
#autoindex  on;

#Shows file listing times as local time
#autoindex_localtime on;

# Wordpress Permalinks example
#try_files \$uri \$uri/ /index.php?q=\$uri&\$args;

            }

include /usr/local/nginx/conf/staticfiles.conf;
include /usr/local/nginx/conf/include_opcache.conf;
include /usr/local/nginx/conf/php.conf;
#include /usr/local/nginx/conf/phpstatus.conf;
include /usr/local/nginx/conf/drop.conf;
#include /usr/local/nginx/conf/errorpage.conf;
#include /usr/local/nginx/conf/vts_mainserver.conf;

       }

Code (Text):

"GET /any_file.php HTTP/2.0" 403 35 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"

Code (Text):

2019/07/05 11:11:42 [error] 14637#14637: *4 FastCGI sent in stderr: "Access to the script '/home/nginx/domains/mydomain.com/public' has been denied (see security.limit_extensions)" while reading response header from upstream, client: [my_ip_address], server: mydomain.com, request: "GET /any_file.php HTTP/2.0", upstream: "fastcgi://127.0.0.1:9000", host: "mydomain.com"

 

I solved it. I customized php.ini settings according to PHP-FPM - CentminMod.com LEMP Nginx web stack for CentOS
And I have /etc/centminmod/php.d/b_customphp.ini:

Code (Text):

date.timezone = "Europe/Moscow"
cgi.fix_pathinfo=0

The problem was in the parameter cgi.fix_pathinfo=0. After I commented this, the problem was solved.
I read in a lot of guides that it is necessary to set cgi.fix_pathinfo=0. And now I don't understand how this setting should be configured correctly and safely.....

 

Ok, I understood. And found your post: From Nginx (cache-enabler) to Varnish.
Thank you so much for help!