file upload authorization

Dave Cheney dave at cheney.net
Mon Dec 3 09:42:40 MSK 2007


You could try using a combination of auth_basic and limit_except to  
prohibit PUT/POST.

Cheers

Dave

On 03/12/2007, at 5:22 PM, Rapsey wrote:

> I don't like the idea that anyone is able to upload a file to my  
> server (up to client_max_body_size), without authorizing himself.  
> Maybe I'm paranoid.
> I was just wondering if there is a way to do authorization first. I  
> can't find anything in the wiki but nginx configuration is full of  
> clever ways to do something that are not apparent.
>
>
> On Dec 2, 2007 10:11 PM, Alex Egg <eggie5 at gmail.com> wrote:
> isnt this  a higher  level question unrelated  to nginx? perhaps your
> back end software ?
>
> On 12/2/07, Rapsey <rapsey at gmail.com> wrote:
> > A fastcgi application receives an uploaded file only after it has  
> been
> > uploaded, how do you then prevent just anyone (or anything) from  
> uploading a
> > file?
> >
> >
> > thank you,
> > Sergej
> >
>
>






More information about the nginx mailing list