From b0941d271ff8f8a412bacd9eacc2c76a0512b3f0 Mon Sep 17 00:00:00 2001 From: Anthony Wang Date: Thu, 1 Jun 2023 16:30:47 +0000 Subject: [PATCH] Revert "Enable CGI for exopages using php-fpm" This reverts commit 52fc0762e81bfddc8a15486afffa4bf122f60a5f. CGI has serious security issues since all CGI scripts run as the http user --- pages.conf | 16 ---------------- 1 file changed, 16 deletions(-) diff --git a/pages.conf b/pages.conf index d148a61..6a66d36 100644 --- a/pages.conf +++ b/pages.conf @@ -37,22 +37,6 @@ server { internal; } - location ~ \.php$ { - # 404 - try_files $fastcgi_script_name =404; - - # default fastcgi_params - include fastcgi_params; - - # fastcgi settings - fastcgi_pass unix:/run/php-fpm/php-fpm.sock; - fastcgi_index index.php; - - # fastcgi params - fastcgi_param DOCUMENT_ROOT $realpath_root; - fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name; - } - location / { try_files $uri $uri.html $uri/ = @fallback; }