diff --git a/install/php-fpm+nginx/nginx.conf b/install/php-fpm+nginx/nginx.conf
index e32641d2a..af7730746 100644
--- a/install/php-fpm+nginx/nginx.conf
+++ b/install/php-fpm+nginx/nginx.conf
@@ -128,7 +128,7 @@ http {
         #    allow YOUR_IP;
         }
         # Deny folder (Sec. lvl1)
-        location ~ \/(cache|log|attach_mod|config|includes|language|triggers)\/ {
+        location ~ \/(cache|log|attach_mod|config|includes|language|triggers|data)\/ {
             deny all;
         }
 
@@ -141,5 +141,8 @@ http {
         location ~ \.(.*sql|tpl|db|inc|log)$ {
             deny  all;
         }
+		# rewrite url
+		rewrite ^/sitemap.xml$ /upload/sitemap.xml;
+		
     }
 }
\ No newline at end of file
diff --git a/upload/.htaccess b/upload/.htaccess
index dd1ef258a..b01e71342 100644
--- a/upload/.htaccess
+++ b/upload/.htaccess
@@ -6,4 +6,7 @@ Options All -Indexes
 
 <FilesMatch "\.(.*sql|tpl|inc|db|log)|(config|common).php$">
 deny from all
-</FilesMatch>
\ No newline at end of file
+</FilesMatch>
+
+RewriteEngine On
+RewriteRule ^sitemap.xml$ upload/sitemap.xml [L]
\ No newline at end of file
diff --git a/upload/upload/.htaccess b/upload/upload/.htaccess
new file mode 100644
index 000000000..48ed4b2bd
--- /dev/null
+++ b/upload/upload/.htaccess
@@ -0,0 +1 @@
+Options All -Indexes
\ No newline at end of file