file upload authorization
Dave Cheney
dave at cheney.net
Mon Dec 3 09:42:40 MSK 2007
You could try using a combination of auth_basic and limit_except to
prohibit PUT/POST.
Cheers
Dave
On 03/12/2007, at 5:22 PM, Rapsey wrote:
> I don't like the idea that anyone is able to upload a file to my
> server (up to client_max_body_size), without authorizing himself.
> Maybe I'm paranoid.
> I was just wondering if there is a way to do authorization first. I
> can't find anything in the wiki but nginx configuration is full of
> clever ways to do something that are not apparent.
>
>
> On Dec 2, 2007 10:11 PM, Alex Egg <eggie5 at gmail.com> wrote:
> isnt this a higher level question unrelated to nginx? perhaps your
> back end software ?
>
> On 12/2/07, Rapsey <rapsey at gmail.com> wrote:
> > A fastcgi application receives an uploaded file only after it has
> been
> > uploaded, how do you then prevent just anyone (or anything) from
> uploading a
> > file?
> >
> >
> > thank you,
> > Sergej
> >
>
>
More information about the nginx
mailing list