60 款纯本地工具，数据不出服务器

Options -Indexes
AcceptPathInfo On
DirectoryIndex index.php index.html

<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRule ^(app|storage)(/|$) - [F,L]
    RewriteRule \.(sql|log|lock|bak|ini|conf|zip|tar|gz|tgz|7z|rar)$ - [F,L]
    RewriteCond %{REQUEST_FILENAME} -f [OR]
    RewriteCond %{REQUEST_FILENAME} -d
    RewriteRule ^ - [L]
    # PATH_INFO 模式：/t/base64 交给 index.php 解析
    RewriteRule ^(.*)$ index.php/$1 [L]
</IfModule>

<IfModule mod_headers.c>
    Header set X-Content-Type-Options "nosniff"
</IfModule>

# 第一步 · 面板「伪静态」框（server 层级）
location ~ ^/(app|storage)/ {
    return 404;
}
if ($uri ~* \.(sql|log|lock|bak|ini|conf|zip|tar|gz)$) {
    return 403;
}
if (!-e $request_filename) {
    rewrite ^(.*)$ /index.php$1 last;
}

# 第二步 · 把 PHP 段换成带 PATH_INFO 的版本
# 宝塔默认只有 location ~ \.php$，/t/base64 这类地址取不到 PATH_INFO
location ~ [^/]\.php(/|$) {
    fastcgi_split_path_info ^(.+?\.php)(/.*)$;
    set $path_info $fastcgi_path_info;
    fastcgi_index index.php;
    include fastcgi_params;
    fastcgi_param PATH_INFO $path_info;
    fastcgi_pass unix:/run/php/php74-fpm.sock;
}