block ini files

hidden Gathering votes

Some wp plugins require ini files config like user.ini or php.ini - these file should be excluded from world access in nginx. For now, I have to include this custom config on every website I create.

Include below location config into all default sites as basic security measure:

location ~ .ini$ {
return 444;
}

Gproposals

1 week ago

One vote
Categories
Feature