Bug#642995: Security issue with Nginx + PHP via FastCGI

Hi Cyril, Dňa Fri, 30 Sep 2011 22:59:35 +0200 Cyril Lavier napísal: > > try this: > > > > location ~ \.php$ { > > try_files $uri @404; > > ... > > } > > > > location @404 { > > return 404; > > } > The thing I don't like is this configuration, it's everytime nginx will > access t

Bug#642995: Security issue with Nginx + PHP via FastCGI

On 09/30/2011 10:45 PM, Slavko wrote: Hi, Hi Slavko. it must be misconfiguration, while for me: Yes, exactly, the problem is resolved by changing the configuration of nginx, to protect php files. HEAD http://bridge.skk/netem.png 200 OK Connection: close Date: Fri, 30 Sep 2011 20:41:09 GMT A

Bug#642995: Security issue with Nginx + PHP via FastCGI

Hi, it must be misconfiguration, while for me: HEAD http://bridge.skk/netem.png 200 OK Connection: close Date: Fri, 30 Sep 2011 20:41:09 GMT Accept-Ranges: bytes Server: nginx/1.1.2 Content-Length: 38217 Content-Type: image/png Last-Modified: Fri, 30 Sep 2011 20:39:05 GMT Client-Date: Fri, 30 Sep

Bug#642995: Security issue with Nginx + PHP via FastCGI

Package: nginx Hi. Few days ago, I remarked a security issue on my own nginx server via misstyping the url of a file (http://www.davromaniak.eu/vrac/helpdesk_set_on_fire.png/index.php [1] instead of http://www.davromaniak.eu/vrac/helpdesk_set_on_fire.png [2]). The most strange part is that f