I had the same issue with:
- CentOS NGINX PHP 5.4
- CentOS NGINX PHP 5.6
- CentOS NGINX PHP 7
- CentOS Apache PHP 7
I fixed it by putting back :
;cgi.fix_pathinfo=0
into /etc/php.ini
I also modified my security.limit but it’s optional
security.limit_extensions = .php
into /etc/php-fpm.d/www.conf
this post gave me the idea : Access denied on nginx