Help! Nginx Vulnerable Remote file inclusion

Mark Alan varia at e-healthexpert.org
Sat Dec 3 09:43:35 UTC 2011


On Sat, 03 Dec 2011 01:36:10 -0500, "escavern" <nginx-forum at nginx.us>
wrote:

Try inserting the following to see if it helps:

>         location ~ \.php$ {

                 try_files $uri =404;

>             root           public_html;
>             include        fastcgi_params;
>             fastcgi_pass   127.0.0.1:9000;
>             fastcgi_index  index.php;
>             fastcgi_param HTTPS on;
>             fastcgi_param  SCRIPT_FILENAME 
> /home/ceriorg/public_html$fastcgi_script_name;
>             #fastcgi_intercept_errors on;


M.



More information about the nginx mailing list