[ticket/16890] Deny access to config file and folder in nginx sample

PHPBB-16890
This commit is contained in:
Marc Alexander 2024-07-06 10:47:49 +02:00
parent 48a233e415
commit 00d1351e55
No known key found for this signature in database
GPG key ID: 50E0D2423696F995

View file

@ -63,7 +63,7 @@ server {
}
# Deny access to internal phpbb files.
location ~ /(config\.php|common\.php|cache|files|images/avatars/upload|includes|(?<!ext/)phpbb(?!\w+)|store|vendor) {
location ~ /(config|common\.php|cache|files|images/avatars/upload|includes|(?<!ext/)phpbb(?!\w+)|store|vendor) {
deny all;
# deny was ignored before 0.8.40 for connections over IPv6.
# Use internal directive to prohibit access on older versions.