On 20 Nov 2010 19h31 WET, nginx-forum@nginx.us wrote:

Olá Nuno,

> Olá António,
>
> that's exactly what I need, since these directories have write
> permissions, but which rules should I have?
>
> placing something like this will work, but the user can see/read the
> php content and I don't want that
>
> [code]
> location ~ ^/(cache|static|etc)/ {
> root /var/www;
> }
> [/code]
>
> How do I deny execution/read access to those files
> (php|pl!php3|php4|php5)

Try this:

location ~* ^/(?:cache|static|etc)/.*\.(?:pl|php[345]*)$ {
return 404; # or 403
}

This directive should precede those that are "legal" in that location
(static, cache, etc).

--- appa


_______________________________________________
nginx mailing list
nginx@nginx.org
http://nginx.org/mailman/listinfo/nginx