I have been working on converting from apache to nginx and I have a
rule
RewriteRule .(asp|aspx|php|jsp)$ - [F,L]
to block all of those. What would be the best way to convert that to
nginx and is there a way to do it in one place so that all
virtualhosts share it?
If I could put that in one place so it applies to everything I serve
with nginx it would be much easier to add other things to it over time.
Mostly I want to completely block many extensions since it makes
analyzing errors much simpler.
On Mon, Nov 08, 2010 at 03:36:04AM -0500, kosh wrote:
I have been working on converting from apache to nginx and I have a
rule
RewriteRule .(asp|aspx|php|jsp)$ - [F,L]
to block all of those. What would be the best way to convert that to
nginx and is there a way to do it in one place so that all
virtualhosts share it?
Place this as the first location of virtual host:
location ~ .(asp|aspx|php|jsp)$ {
return 403;
}
You may also include it as a file.
If I could put that in one place so it applies to everything I serve
with nginx it would be much easier to add other things to it over time.
Mostly I want to completely block many extensions since it makes
analyzing errors much simpler.
This is common mistake that such single place makes administration
easier.
Suppose, eventually you do not need to block .php in some new site.
What will you do ?