Seriously if it doesn't works for lighttppd that use php fcgi and works
for nginx it is nginx issue isn't it ?
With certain configuration similar issues are also in apache but it doesn'tnecessary mean the webserver is at fault.
Since php 5.3.9 the fpm sapi has 'security.limit_extensions' (defaults to'.php') which limits the extensions of the main script
FPM will allow to parse.
It should prevent poor configuration mistakes.
nginx mailing list