Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-10007

Add directive 'internal' to blocked folders in nginx example configuration.

    Details

    • Type: Improvement
    • Status: Unverified Fix
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 3.0.8
    • Fix Version/s: 3.0.9-RC1
    • Component/s: None
    • Labels:
      None

      Description

      This is because the "deny" directive is not considered a security feature and does not work for IPv6 requests before nginx 0.8.22.

        Activity

        Hide
        Oleg Oleg [X] (Inactive) added a comment -

        Tested on my live board.

        • "Deny all" only results in 403.
        • "Internal" only results in 404.
        • When both are given, "internal" takes precedence and the result is 404.
        Show
        Oleg Oleg [X] (Inactive) added a comment - Tested on my live board. "Deny all" only results in 403. "Internal" only results in 404. When both are given, "internal" takes precedence and the result is 404.

          People

          • Assignee:
            bantu Andreas Fischer
            Reporter:
            bantu Andreas Fischer
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development