Welcome! Log In Create A New Profile

Advanced

Re: nginx.conf PHP example on Windows

August 27, 2009 11:48AM
On Thu, Aug 27, 2009 at 11:40:11AM -0400, adminlists@zer7.com wrote:

> The default PHP example is insecure on Windows.
>
> It needs to be ~* instead of ~. Otherwise, someone can request .PHP instead of .php and
> read the text of the PHP file. You may want to point this out somewhere in the docs, or just
> make the default matching ~* in the default, example configuration.
>
> This is probably not an issue for people who think about it, but I suspect many people will just
> use the defaults.

Changes with nginx 0.8.6 20 Jul 2009

*) Bugfix: now in MacOSX, Cygwin, and nginx/Windows locations given by
a regular expression are always tested in case insensitive mode.


--
Igor Sysoev
http://sysoev.ru/en/
Subject Author Posted

nginx.conf PHP example on Windows

adminlists@zer7.com August 27, 2009 11:40AM

Re: nginx.conf PHP example on Windows

Igor Sysoev August 27, 2009 11:48AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 142
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 500 on July 15, 2024
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready