i add in the below code for deny all but not sure if is correct or not. I also remove 3 .htaccess file from chive folder, yii folder and protected folder

location ~* ^/srv/www/SUBDOMAIN/public_html/yii {
deny all;
}

location ~* ^/srv/www/SUBDOMAIN/public_html/protected {
deny all;
}