Ques/Help Nginx Secure Install Directory

[cloudpro]

Hello

we are trying to prevent access to the install/upgrade directory in Nginx. We have the follow config in our nginx server block.
Code:

location /community/install/ {
    internal;
}

Our XF is in a subdirectory /community

If we browse to https://ourpublicdomain.com/community/install we receive a 404 which is what we want. However if we use the direct link

PHP:

https://ourpublicdomain.com/community/install/index.php?upgrade/

then the upgrade page appears.

Can someone provide...

Read more

Continue reading...