nginx регулярка обработки php

Добрый вечер.

Имеется такой конфиг. виртуального хоста, задумался, а безопасен ли он?

Движок сайта joomla 3.3.4

nginx -v

nginx version: nginx/1.8.0

Меня волнуют локейшены administrator и pma .

pma сделал так.

ln -s /usr/local/www/phpMyAdmin/ /usr/local/www/f-fff.net/pma

конфиг. виртуального хоста.

server {

	listen 1.1.1.1:80;

	server_name  f-fff.net;

	return       301 http://www.f-fff.net$request_uri;

}



server {

        listen 1.1.1.1:80;

        server_name www.f-fff.net;

        access_log /mnt/backLOG/log/nginx/access_log; 

        error_log /mnt/backLOG/log/nginx/error_log info;

        root /usr/local/www/f-fff.net;

        index index.php index.html index.htm default.html default.htm;

	open_file_cache max=15024 inactive=60s;

	open_file_cache_valid 300s;

	open_file_cache_min_uses 2;

	open_file_cache_errors on;



location / {

        try_files $uri $uri/ /index.php?$args;

}



location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {

        return 403;

        error_page 403 /403_error.html;

}



location ~ \.php$ {

	fastcgi_pass unix:/tmp/www.sock;

        fastcgi_index index.php;

        include fastcgi_params;

        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

}



location ~* \.(ico|pdf|flv)$ {

        expires 1y;

}



location ~* \.(js|css|png|jpg|jpeg|gif|swf|xml|txt)$ {

        expires 30d;

}



location /administrator/ {

        index index.php;

        auth_basic           "closed site";

        auth_basic_user_file /usr/local/.htpasswd;

location ~ \.php$ {

        fastcgi_pass unix:/tmp/www.sock;

        fastcgi_index index.php;

        include fastcgi_params;

        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        fastcgi_ignore_client_abort off;

        fastcgi_param PHP_ADMIN_VALUE "xcache.cacher=Off";

        fastcgi_param PHP_ADMIN_VALUE "xcache.stat=Off";

        fastcgi_param PHP_ADMIN_VALUE "xcache.optimizer=Off";

   }

}



location ~* ^/modules/mod_videopages/helper.php {

        fastcgi_pass unix:/tmp/www.sock;

        include fastcgi_params;

        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        fastcgi_param PHP_ADMIN_VALUE "xcache.cacher=Off";

        fastcgi_param PHP_ADMIN_VALUE "xcache.stat=Off";

        fastcgi_param PHP_ADMIN_VALUE "xcache.optimizer=Off";

}



location /pma/ {

	alias /usr/local/www/phpMyAdmin/;

	index index.php;

	auth_basic           "closed site";

   	auth_basic_user_file /usr/local/.htpasswd;

location ~ \.php$ {

	fastcgi_pass unix:/tmp/www.sock;

	fastcgi_index index.php;

	include fastcgi_params;

	fastcgi_param SCRIPT_FILENAME $request_filename;

	fastcgi_ignore_client_abort off;

        fastcgi_param PHP_ADMIN_VALUE "xcache.cacher=Off";

        fastcgi_param PHP_ADMIN_VALUE "xcache.stat=Off";

        fastcgi_param PHP_ADMIN_VALUE "xcache.optimizer=Off";

   }

}



location ~ /\.ht {

        deny  all;

}

}