3 ms·
I have that location block in my nginx config but I also have the following above: location / { try_files $uri $uri/ /index.php?$query_string;
by Kiro 7y ago
I have that location block in my nginx config but I also have the following above:
location / {
try_files $uri $uri/ /index.php?$query_string;
}
Does this mean I'm safe? I'm asking because it's in a separate location block so not sure how this works (thinking that the try_files thing should be in the same location block).
- nullify88 7y agoI would suggest having a try_files in the .php location. Because it just takes someone sending a request to index.php for Nginx to process the request in a potentially vulnerable location block that doesn't have try_files. You perhaps might not be vulnerable if you use an internal directive inside your .php location block.