Re: Nginx Installation on Unix systems
| From: | Yasuo Ohgaki | Date: | Wed, 08 Jan 2014 00:39:45 +0000 |
| Subject: | Re: Nginx Installation on Unix systems | ||
| References: | 1 2 3 | Groups: | php.doc |
| Request: | Send a blank email to phpdoc+get-969384795@lists.php.net to get a copy of this message | ||
Hi Jacob,
On Wed, Jan 8, 2014 at 8:28 AM, Jacob Clark <iamjacobclark@gmail.com> wrote:
> I have submitted a patch for a new entry to the manual for
> consideration of the mailing list that covers Nginx 1.4.x on Unix
> systems via the PHP Docbook Online Editor, the direct link to this
> patch is:
> https://edit.php.net/index.php?patchID=1098&project=PHP
>
It seems you haven't covered
Passing Uncontrolled Requests to PHP
http://wiki.nginx.org/Pitfalls
which allows arbitrarily script execution.
Regards,
--
Yasuo Ohgaki
yohgaki@ohgaki.net