location /themesetup { root $MAGE_ROOT; location ~ ^/themesetup/index.php { ### This fixes the problem: fastcgi_split_path_info ^(.+?\.php)(/.*)$; ################################ fastcgi_pass fastcgi_backend; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; include fastcgi_params; } location ~ ^/themesetup/(?!pub/). { deny all; } location ~ ^/themesetup/pub/ { add_header X-Frame-Options "SAMEORIGIN"; }}