A brief analysis of how Nginx prohibits access to .php files

Nginx, as a high-performance, high-reliability web server, is widely used in the construction of large websites. However, some malicious attackers will use .php files to carry out attacks. In order to avoid security problems, we need to prohibit access to .php files. This article will introduce how Nginx prohibits access to .php files.

1. Use the location directive

In the Nginx configuration file, you can use the location directive to restrict access to a certain directory or file. By adding the following code to the location directive, you can prohibit access to the .php file:

location ~ \.php$ {
    deny all;
}

In the above code, \ represents the escape character, . represents any character, and $ represents the end. So the meaning of this code is to match all files ending with .php with a regular expression and disable access to them.

It should be noted that this method is only suitable for prohibiting access to PHP files and is invalid for other types of files.

2. Use the if directive

In addition to using the location directive, we can also use the if directive to prohibit access to the .php file. In the Nginx configuration file, you can add the following code:

if ($request_uri ~* “\.php”) {
    return 403;
}

The meaning of the above code is that when the requested URI contains .php, 403 (Access Denied) is returned.

However, there are some risks in using if instructions, which may lead to security vulnerabilities. Therefore, it is recommended to use if directive only when necessary.

3. Modify the configuration file of the PHP interpreter

In addition to prohibiting access to .php files in the Nginx configuration file, we can also modify PHP interpreter configuration file to achieve the same effect.

In the configuration file php.ini of the PHP interpreter, you can add the following code:

security.limit_extensions = .php

The meaning of the above code is that only .php files are allowed to be executed, and other types of files will be prohibited. implement. In this way, unnecessary security risks can be avoided.

It should be noted that this method is only applicable to prohibiting the execution of php files and is invalid for accessing .php files.

Summary

Prohibiting access to .php files is one of the important measures to ensure website security. This article introduces several methods for Nginx to prohibit access to .php files, including using the location directive, if directive, and modifying the configuration file of the PHP interpreter. It is recommended that readers choose a method suitable for their own website to improve the security of the website.

The above is the detailed content of A brief analysis of how Nginx prohibits access to .php files. For more information, please follow other related articles on the PHP Chinese website!