Remi Collet
3b6aed19c3
- provide nginx configuration (fedora) - drop mandatory dependency on httpd (suggested) #1336091 - protect php files in uploads directory
35 lines
892 B
Text
35 lines
892 B
Text
# Wordpress
|
|
|
|
location = /wordpress {
|
|
alias /usr/share/wordpress/;
|
|
}
|
|
|
|
location /wordpress/ {
|
|
root /usr/share;
|
|
index index.php;
|
|
|
|
location ~ ^/wordpress/wp-content/uploads/(.+)\.php$ {
|
|
# Deny access to any php file in the uploads directory
|
|
deny all;
|
|
}
|
|
location ~ ^/wordpress/wp-content/plugins/akismet/(.+)\.php$ {
|
|
# Deny access to any php file in the akismet directory
|
|
deny all;
|
|
}
|
|
|
|
# Access is only allowed via local access
|
|
# Change this once configured
|
|
location ~ ^/wordpress/(.+\.php)$ {
|
|
allow 127.0.0.1;
|
|
allow ::1;
|
|
deny all;
|
|
|
|
try_files $uri =404;
|
|
fastcgi_intercept_errors on;
|
|
include fastcgi_params;
|
|
fastcgi_param SERVER_NAME $host;
|
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
|
fastcgi_pass php-fpm;
|
|
}
|
|
}
|
|
|