Block access to a file!

Server NGINX
1

Hi,
it must be a piece of cake but i can not find a soloution…

the problem is " location admin.php". you can check it below…

i just want to allow access to admin.php to some ip address and deny
others.

if i remove allow line from it it deny all; but when I add allow line it
dont work …
please help me…
I tried too many syntax but no success.
i even add root and index to this location but browser prompt to
download my php file…

please help

here 's my server section of config…very simple
server {
listen 80;
server_tokens off;
server_name www.mysite.com;
access_log /var/log/nginx/mysite.log;
error_page 404 /404.html;
error_page 500 502 503 504 /50x.html;

    location / {
       root /usr/share/nginx/www;
       index  index.php;
       client_max_body_size 8m;
       client_body_buffer_size 256k;
    }
   location = /50x.html {
       root /usr/share/nginx/html;
    }
    location = /404.html {
       root /usr/share/nginx/html;
    }
    location ~ /\.ht {
        deny  all;
    }
    location ~ \.php$ {
        root /usr/share/nginx/www;
        fastcgi_pass   127.0.0.1:9000;
        fastcgi_index  index.php;
        fastcgi_param  SCRIPT_FILENAME

$document_root$fastcgi_script_name;
include fastcgi_params;
set $ssl off;
if ($ssl_protocol != “” ) {
set $ssl on;
}
fastcgi_param HTTPS $ssl;
}

    location ~ admin.php {
         allow 217.66.196.193;
         deny all;
     }

Posted at Nginx Forum:

2

On Wed, Jun 06, 2012 at 09:22:50AM -0400, torajx wrote:

Hi there,

it must be a piece of cake but i can not find a soloution…

the problem is " location admin.php". you can check it below…

No, the problem is “location ~ admin.php” coming after “location ~
.php$”. The exact characters matter.

http://nginx.org/r/location

i just want to allow access to admin.php to some ip address and deny
others.

Either use something like “location = /admin.php”, or maybe reorder to
regex locations (with ~) so they match in the order you want.

You will (probably) want to repeat your fastcgi_pass and other fastcgi_*
config lines inside the new location block. One request is handled by
one location.

Good luck with it,

f

Francis D. [email protected]

3

thank you for reply…
i change it to "location = /admin.php "
and move it above the "location ~ .php$ "
it blocks other IPs but give file not found error for allowed Ips…

the last time I added root to admin.php location the browser promot me
to download admin.php…

what can I do now ?

Posted at Nginx Forum:

4

thank you again; i will test and inform you here…

Posted at Nginx Forum:

5

Thank you ! it worked great…

Posted at Nginx Forum:

6

On Wed, Jun 06, 2012 at 09:50:57AM -0400, torajx wrote:

thank you for reply…
i change it to "location = /admin.php "
and move it above the "location ~ .php$ "

“”"
Either use something like “location = /admin.php”, or maybe reorder to
regex locations (with ~) so they match in the order you want.
“”"

You’ve done both. That’s ok, but unnecessary.

it blocks other IPs but give file not found error for allowed Ips…

the last time I added root to admin.php location the browser promot me
to download admin.php…

what can I do now ?

“”"
You will (probably) want to repeat your fastcgi_pass and other fastcgi_*
config lines inside the new location block. One request is handled by
one location.
“”"

Do that.

f

Francis D. [email protected]