(02-21-2016, 07:59 AM)Castey Wrote: Nginx uses one config file per domain and rewriting in one domain won't affect other domains but still, impropriety rules still can kill whole web server. Maybe we can develop module for creating rules? Module will check syntax before allow to save them to domain config file and prevent from errors (in this case we can excluede several options from rules for users to make it more secure). Rules will be activated with next deamon run like new subdomain etc.
Building a rule interface...hmmm.. How to validate the config? Would you allow end user do that?
Nginx have a lot of rules. A lot of syntax and beside that what if user change the root to / instead of his own directory.
We should then validate the syntax is OK and the input won't go outside of current authorised user directories?
Only serious way of validating rules is using nginx it self:
https://wincent.com/wiki/Checking_nginx_...ile_syntax
But that only validate the syntax. Doesn't garantee that the new config is SECURE.
No support using PM (Auto adding to IGNORE list!), use the forum.
How to ask
200$ free to start your VPS 60 days credit
How to ask
200$ free to start your VPS 60 days credit