[ticket/16213] Update nginx & lighttpd sample files as well

PHPBB-16213
This commit is contained in:
Marc Alexander 2024-07-07 15:26:33 +02:00
parent 84eb635d2c
commit 837939f28c
No known key found for this signature in database
GPG key ID: 50E0D2423696F995
2 changed files with 8 additions and 2 deletions

View file

@ -28,7 +28,7 @@ $HTTP["host"] == "www.myforums.com" {
accesslog.filename = "/var/log/lighttpd/access-www.myforums.com.log" accesslog.filename = "/var/log/lighttpd/access-www.myforums.com.log"
# Deny access to internal phpbb files. # Deny access to internal phpbb files.
$HTTP["url"] =~ "^/(config|common\.php|cache|files|images/avatars/upload|includes|phpbb|store|vendor)" { $HTTP["url"] =~ "^/(config|common\.php|cache|files|images/avatars/upload|includes|phpbb|store|vendor|vendor-ext)" {
url.access-deny = ( "" ) url.access-deny = ( "" )
} }

View file

@ -55,7 +55,7 @@ server {
} }
# Deny access to internal phpbb files. # Deny access to internal phpbb files.
location ~ /(config|common\.php|cache|files|images/avatars/upload|includes|(?<!ext/)phpbb(?!\w+)|store|vendor) { location ~ /(config|common\.php|cache|files|images/avatars/upload|includes|(?<!ext/)phpbb(?!\w+)|store|vendor|vendor-ext) {
deny all; deny all;
# deny was ignored before 0.8.40 for connections over IPv6. # deny was ignored before 0.8.40 for connections over IPv6.
# Use internal directive to prohibit access on older versions. # Use internal directive to prohibit access on older versions.
@ -92,4 +92,10 @@ server {
deny all; deny all;
internal; internal;
} }
# Deny access to apache configuration files.
location ~ /\.htaccess|/\.htpasswd|/\.htgroups {
deny all;
internal;
}
} }