Configuring nginx for both static pages and fcgi simultaneously

B.R. reallfqq-nginx at yahoo.fr
Wed Aug 3 17:07:53 UTC 2016


I disagree: it is a good feature to check for script file existence before
calling PHP on it with something like:
try_files [...] =404;
It helps mitigating attacks by avoiding to pave the way to undue files
being interpreted.

That only works if the filesystem containing PHP scripts is accessible from
nginx aswell, ofc.
---
*B. R.*

On Mon, Aug 1, 2016 at 1:50 AM, Maxim Dounin <mdounin at mdounin.ru> wrote:

> Hello!
>
> On Mon, Aug 01, 2016 at 01:38:29AM +0200, Richard Stanway wrote:
>
> > Are you sure you don't want to use try_files for this?
>
> If a required handling is known in advance there is no need to use
> try_files and waste resources on it.
>
> --
> Maxim Dounin
> http://nginx.org/
>
> _______________________________________________
> nginx mailing list
> nginx at nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20160803/06dd51ec/attachment.html>


More information about the nginx mailing list