diff -Nur --no-dereference smeserver-php-3.0.0.old/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/95AddType00PHP2ibays smeserver-php-3.0.0/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/95AddType00PHP2ibays
--- smeserver-php-3.0.0.old/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/95AddType00PHP2ibays	2021-03-08 01:54:56.143000000 -0500
+++ smeserver-php-3.0.0/root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/95AddType00PHP2ibays	2021-03-08 02:18:36.512000000 -0500
@@ -16,9 +16,10 @@
 		{
 		    my $version = PhpFpmVersionToUse($ibay);
 		    my $name = lc $key;
+		    my $FilesMathes = ( ($ibay->prop('AllowPHTML') || 'disabled') eq 'enabled' ) ? '(xml|phtml|html|htm|php|phar)': '(phar|php)';
 		    $OUT .=<<"_EOF";
     SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=\$1
-    <FilesMatch \\.php\$>
+    <FilesMatch \\.$FilesMathes\$>
 	<If "-f \%\{SCRIPT_FILENAME\}">
         SetHandler "proxy:unix:/var/run/php-fpm/php$version-$name.sock|fcgi://localhost"
 	</If>
diff -Nur --no-dereference smeserver-php-3.0.0.old/root/etc/e-smith/templates/etc/php-fpm.d/ibays.conf/10Ibays smeserver-php-3.0.0/root/etc/e-smith/templates/etc/php-fpm.d/ibays.conf/10Ibays
--- smeserver-php-3.0.0.old/root/etc/e-smith/templates/etc/php-fpm.d/ibays.conf/10Ibays	2021-03-08 01:54:56.139000000 -0500
+++ smeserver-php-3.0.0/root/etc/e-smith/templates/etc/php-fpm.d/ibays.conf/10Ibays	2021-03-08 02:18:38.742000000 -0500
@@ -26,8 +26,9 @@
                                                                     'passthru,phpinfo,' .
                                                                     'escapeshellarg,escapeshellcmd';
   my $autoprepend         = $ibay->prop('PHPAutoPrependFile')  || 'enabled';
-  my $MailForceSender	  = $ibay->prop('MailForceSender')  || "$name\@$DomainName";
-												# TODO => check ibay associated domains.
+  my $MailForceSender	  = $ibay->prop('MailForceSender')  || "$name\@$DomainName"; # TODO => check ibay associated domains.
+  my $limitExtensions     = ( ($ibay->prop('AllowPHTML') || 'disabled') eq 'enabled' ) ? "security.limit_extensions= .php .htm .html .phar .phtml .xml " : "";
+
   # Format vars 
   my $autoprep            = ( $autoprepend eq "disabled") ? "" : "/usr/share/php/auth_translation.php";
   my $autoprepath         = ( $autoprepend eq "disabled") ? "" : ",/usr/share/php/";
@@ -51,6 +52,7 @@
 pm.min_spare_servers = 3
 pm.max_spare_servers = 4
 pm.max_requests = 1000
+$limitExtensions
 slowlog = /var/log/php/$key/slow.log
 php_admin_value[session.save_path] = /var/lib/php/$key/session
 php_admin_value[opcache.file_cache]  = /var/lib/php/$key/opcache