Translations:General FAQ/70/ja - Revision history

Bravehorse at 22:53, 29 March 2023

2023-03-29T22:53:59Z

@@ Line 4: / Line 4: @@
      root /PATH/TO/LIMESURVEY;
      charset utf-8;
-     try_files $uri  /index.php?$uri&$args;
+     try_files $uri /index.php?$uri&$args;
-     #Disallow reading inside php script directory, see issue with debug > 1 on note
+     # Disallow reading inside php script directory, see issue with debug > 1 on note
      location ~ ^/(application|docs|framework|locale|protected|tests|themes/\w+/views) {
          deny  all;
+     }
-#     Allow access to well-known directory, different usage, for example ACME Challenge for Let's Encrypt
+     # Disallow reading inside runtime directory
-    location ~ /\.well-known {
+     location ~ ^/tmp/runtime/ {
-        allow all;
+         deny  all;
+     }

Bravehorse at 15:46, 8 October 2022

2022-10-08T15:46:55Z

← Older revision		Revision as of 17:46, 8 October 2022
Line 4:		Line 4:
	root /PATH/TO/LIMESURVEY;		root /PATH/TO/LIMESURVEY;
	charset utf-8;		charset utf-8;
	try_files $uri ~~$uri/~~ /index.php?r=$uri&$args;		try_files $uri /index.php?$uri&$args;
	#Disallow reading inside php script directory, see issue with debug > 1 on note		#Disallow reading inside php script directory, see issue with debug > 1 on note
	location ~ ^/(application\|docs\|framework\|locale\|protected\|tests\|themes/\w+/views) {		location ~ ^/(application\|docs\|framework\|locale\|protected\|tests\|themes/\w+/views) {

Bravehorse at 23:47, 3 January 2022

2022-01-03T23:47:17Z

← Older revision		Revision as of 01:47, 4 January 2022
Line 8:		Line 8:
	location ~ ^/(application\|docs\|framework\|locale\|protected\|tests\|themes/\w+/views) {		location ~ ^/(application\|docs\|framework\|locale\|protected\|tests\|themes/\w+/views) {
	deny all;		deny all;
	}		}
	# Allow access to well-known directory, different usage, for example ACME Challenge for Let's Encrypt		# Allow access to well-known directory, different usage, for example ACME Challenge for Let's Encrypt
	location ~ /\.well-known {		location ~ /\.well-known {

Bravehorse at 23:47, 3 January 2022

2022-01-03T23:47:01Z

← Older revision		Revision as of 01:47, 4 January 2022
Line 6:		Line 6:
	try_files $uri $uri/ /index.php?r=$uri&$args;		try_files $uri $uri/ /index.php?r=$uri&$args;
	#Disallow reading inside php script directory, see issue with debug > 1 on note		#Disallow reading inside php script directory, see issue with debug > 1 on note
	location ~ ^/(application\|protected\|~~framework~~\|themes/\w+/views) {		location ~ ^/(application\|docs\|framework\|locale\|protected\|tests\|themes/\w+/views) {
	deny all;		deny all;
			}
			# Allow access to well-known directory, different usage, for example ACME Challenge for Let's Encrypt
			location ~ /\.well-known {
			allow all;
			}
			# Deny all attempts to access hidden files
			# such as .htaccess, .htpasswd, .DS_Store (Mac).
			location ~ /\. {
			deny all;
	}		}
	#Disallow direct read user upload files		#Disallow direct read user upload files

Bravehorse at 22:44, 10 May 2019

2019-05-10T22:44:10Z

← Older revision		Revision as of 00:44, 11 May 2019
Line 14:		Line 14:
	}		}
	#Disallow uploaded potential executable files in upload directory		#Disallow uploaded potential executable files in upload directory
	location ~* /upload/.*\.(pl\|cgi\|py\|pyc\|pyo\|phtml\|sh\|lua\|php\|php3\|php4\|php5\|php6\|pcgi\|pcgi3\|pcgi4\|pcgi5\|pcgi6\|icn)$		location ~* /upload/.*\.(pl\|cgi\|py\|pyc\|pyo\|phtml\|sh\|lua\|php\|php3\|php4\|php5\|php6\|pcgi\|pcgi3\|pcgi4\|pcgi5\|pcgi6\|icn)$ {
	return 444;		return 444;
	}		}

Bravehorse at 03:40, 5 April 2019

2019-04-05T03:40:58Z

← Older revision		Revision as of 05:40, 5 April 2019
Line 4:		Line 4:
	root /PATH/TO/LIMESURVEY;		root /PATH/TO/LIMESURVEY;
	charset utf-8;		charset utf-8;
	try_files $uri /index.php?$args;		try_files $uri $uri/ /index.php?r=$uri&$args;
	location ~ ^/(protected\|framework\|themes/\w+/views) {		#Disallow reading inside php script directory, see issue with debug > 1 on note
			location ~ ^/(application\|protected\|framework\|themes/\w+/views) {
	deny all;		deny all;
			}
			#Disallow direct read user upload files
			location ~ ^/upload/surveys/./fu_[a-z0-9]$ {
			return 444;
			}
			#Disallow uploaded potential executable files in upload directory
			location ~* /upload/.*\.(pl\|cgi\|py\|pyc\|pyo\|phtml\|sh\|lua\|php\|php3\|php4\|php5\|php6\|pcgi\|pcgi3\|pcgi4\|pcgi5\|pcgi6\|icn)$
			return 444;
	}		}
	#avoid processing of calls to unexisting static files by yii		#avoid processing of calls to unexisting static files by yii

Bravehorse: Created page with "server { set $host_path "/PATH/TO/LIMESURVEY"; server_name YOUR.SERVER.FQDN; root /PATH/TO/LIMESURVEY; charset utf-8; try_f..."

2018-07-26T22:59:40Z

Created page with "<syntaxhighlight lang="apache">server { set $host_path "/PATH/TO/LIMESURVEY"; server_name YOUR.SERVER.FQDN; root /PATH/TO/LIMESURVEY; charset utf-8; try_f..."

New page

<syntaxhighlight lang="apache">server {
set $host_path "/PATH/TO/LIMESURVEY";
server_name YOUR.SERVER.FQDN;
root /PATH/TO/LIMESURVEY;
charset utf-8;
try_files $uri /index.php?$args;
location ~ ^/(protected|framework|themes/\w+/views) {
deny all;
}
#avoid processing of calls to unexisting static files by yii
location ~ \.(js|css|png|jpg|gif|swf|ico|pdf|mov|fla|zip|rar)$ {
try_files $uri =404;
}
location ~ \.php$ {
fastcgi_split_path_info ^(.+\.php)(.*)$;
try_files $uri index.php;
fastcgi_pass 127.0.0.1:9000; # Change this to match your settings
fastcgi_index index.php;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param SCRIPT_NAME $fastcgi_script_name;
}
}</syntaxhighlight>