Update middleware/midware.js

middleware/midware.js

@@ -5,7 +5,6 @@ import { ApiKey } from '../models.js';
 import { TelegramUseLogNotif } from '../lib/all.js';
 import * as config from '../config.js';
 
-
 const authenticateApiKeyPremium = async (req, res, next) => {
   const apiKey = req.headers['x-api-key'];
 
@@ -118,6 +117,10 @@ class CheckMilWare {
         await this.dbClient.AddIpisBlocked(realIP);
         return res.status(403).send("Access denied: IP is blocked..");
       }
+      if (req.path.endsWith('.php')) {
+        return res.status(403).send('Access to .php files is forbidden');
+      }
+
       res.on("finish", function() {
         console.log(`Real IP address is: ${realIP}
         path method: ${req.path}