On Tue, Nov 24, 2009 at 02:41:04PM +0800, Shri @ DevLib.Org wrote:

> How would I go about blocking requests which try to exploit application / php flaws?
>
> One in particular is ... of the form http://www.domain.com/search.php?searchterm=http://217.218.xxx.x/abc.php
>
> I'd like to block all requests which have a param that begins with http:// (searchterm in the above case).
>
> Can this be done at a server level?

server {

if ($arg_searchterm ~ ^http://) {
return 403;
}

or for any paramter name:

if ($args ~ =http://) {
return 403;
}


--
Igor Sysoev
http://sysoev.ru/en/

_______________________________________________
nginx mailing list
nginx@nginx.org
http://nginx.org/mailman/listinfo/nginx