make it so nginx will only execute php on the upload script. This fixes the uploader from being able to upload any php script and that being able to be executed.
All checks were successful
/ docker (push) Successful in 1m47s
All checks were successful
/ docker (push) Successful in 1m47s
This commit is contained in:
parent
7efee12364
commit
d9da3eb9ab
@ -24,7 +24,7 @@ http {
|
|||||||
|
|
||||||
client_max_body_size 500M; # Will get replaced by the environment variable MAX_UPLOAD_SIZE
|
client_max_body_size 500M; # Will get replaced by the environment variable MAX_UPLOAD_SIZE
|
||||||
|
|
||||||
location ~ \.php$ {
|
location upload.php {
|
||||||
try_files $uri =404;
|
try_files $uri =404;
|
||||||
|
|
||||||
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
||||||
|
Loading…
Reference in New Issue
Block a user