security - Nginx disallow download file -
i'm facing issue include files in web app. stored in inc/ subdirectory. if open browser , point to: www.mysite.com/inc/ 404 not found ok.
if point to: www.mysite.com/inc/connection.inc file contains db info can download absolutely not good!
i have configuration in default website config:
location ~ /(ajax|inc|prints|temp) { deny all; return 404; } how can avoid files being downloaded?
found solution. simple
location ~ \.inc { deny all; } the problem there 1 thread ion google issue.
Comments
Post a Comment