Set cgi.fix_pathinfo=0 to as a security enhancement