fastcgi problem
Ed W
lists at wildgooses.com
Mon Feb 23 13:38:05 MSK 2009
Paul van der Linden wrote:
>>> location / {
>>> fastcgi_pass localhost:8888;
>>> fastcgi_index moin.fcg;
>>>
Remember also that this will cause any .php (or whatever cgi) files
anywhere on the filesystem to be executed. It seems to be a pretty
common error for nginx PHP setups to use something like the above AND
also allow arbitrary named file uploads. If the user of the php
application can cause some file to be uploaded with a .php extension
then point to it's disk path then the file will be executed.
Ed W
More information about the nginx
mailing list