Skip to content

Commit

Permalink
Merge pull request #532 from turbo124/master
Browse files Browse the repository at this point in the history
Disable access to php scripts in /storage
  • Loading branch information
turbo124 authored Sep 5, 2023
2 parents 3969a37 + 8706695 commit c4ac430
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions config/nginx/in-vhost.conf
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,11 @@ server {
location = /favicon.ico { access_log off; log_not_found off; }
location = /robots.txt { access_log off; log_not_found off; }


location ~* /storage/.*\.php$ {
return 503;
}

location ~ \.php$ {
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass app:9000;
Expand Down

0 comments on commit c4ac430

Please sign in to comment.