Jsp and php Vulnerabilities

Taking over a project is written in jsp. It seems that development is too troublesome to use. As a result, the new features are written in php. jsp and php jump to each other. Suddenly, one day, it was found that the php source code was displayed on the tomcat web site, in the php site, jsp is also the source code that is displayed. Solve the problem immediately. apache added: FilesMatch. (jsp | inc)

Taking over a project is written in jsp. It seems that development is too troublesome to use. As a result, the new features are written in php. jsp and php jump to each other. Suddenly, one day, it was found that the php source code was displayed on the tomcat web site, in the php site, jsp is also the source code displayed. immediately remove the problem. apache added: FilesMatch \. (jsp | inc)

Taking over a project is written in jsp. It seems that development is too troublesome to use. As a result, the new features are written in php. jsp and php are mutually redirected,

Suddenly one day, I found that the php source code is displayed when I open php on the tomcat web site. The jsp source code is also displayed on the php site,

Solve the problem immediately

Added apache:

 
  Order Deny,AllowDeny from all
 

Tomcat web. xml added:

                  
  
   
    Members Only
                           
   
    *.php
                    
                            
 

Restart and access will return error 403.