With openssl configured on LNMP, you can only access html pages. After accessing the PHP page, you can directly download the PHP file.

Source: Internet
Author: User
Tags epoll sendfile
As shown in the following figure, you can only access html pages When configuring openssl on LNMP. After accessing the PHP page, you can directly download the PHP file. What's going on? My nginx. conf file is as follows: {code...} as shown in the following figure, configure openssl on LNMP to only access the html page. After accessing the PHP page, download the PHP file. What's going on?
My nginx. conf file is as follows:

user  www www;worker_processes auto;error_log  /home/wwwlogs/nginx_error.log  crit;pid        /usr/local/nginx/logs/nginx.pid;#Specifies the value for maximum file descriptors that can be opened by this process.worker_rlimit_nofile 51200;events    {        use epoll;        worker_connections 51200;        multi_accept on;    }http    {        include       mime.types;        default_type  application/octet-stream;        server_names_hash_bucket_size 128;        client_header_buffer_size 32k;        large_client_header_buffers 4 32k;        client_max_body_size 50m;        sendfile on;        tcp_nopush     on;        keepalive_timeout 60;        tcp_nodelay on;        fastcgi_connect_timeout 300;        fastcgi_send_timeout 300;        fastcgi_read_timeout 300;        fastcgi_buffer_size 64k;        fastcgi_buffers 4 64k;        fastcgi_busy_buffers_size 128k;        fastcgi_temp_file_write_size 256k;        gzip on;        gzip_min_length  1k;        gzip_buffers     4 16k;        gzip_http_version 1.0;        gzip_comp_level 2;        gzip_types       text/plain application/x-javascript text/css application/xml;        gzip_vary on;        gzip_proxied        expired no-cache no-store private auth;        gzip_disable        "MSIE [1-6]\.";        #limit_conn_zone $binary_remote_addr zone=perip:10m;        ##If enable limit_conn_zone,add "limit_conn perip 10;" to server section.        server_tokens off;        #log format        log_format  access  '$remote_addr - $remote_user [$time_local] "$request" '             '$status $body_bytes_sent "$http_referer" '             '"$http_user_agent" $http_x_forwarded_for';server    {        listen 80 default;        #listen [::]:80 default ipv6only=on;        server_name www.lnmp.org;        index index.html index.htm index.php;        root  /home/wwwroot/default;        #error_page   404   /404.html;        location ~ [^/]\.php(/|$)            {                # comment try_files $uri =404; to enable pathinfo                try_files $uri =404;                fastcgi_pass  unix:/tmp/php-cgi.sock;                fastcgi_index index.php;                include fastcgi.conf;                #include pathinfo.conf;            }        location /nginx_status {            stub_status on;            access_log   off;        }        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$            {                expires      30d;            }        location ~ .*\.(js|css)?$            {                expires      12h;            }        access_log  /home/wwwlogs/access.log  access;    }    server {         listen       443 ssl;         server_name  fq.warsong.pw;         ssl                  on;         ssl_certificate      1_fq.warsong.pw_bundle.crt;       ssl_certificate_key      2_fq.warsong.pw.key;       ssl_session_timeout  5m;         ssl_protocols  SSLv3 TLSv1;         ssl_ciphers  HIGH:!ADH:!EXPORT56:RC4+RSA:+MEDIUM;         ssl_prefer_server_ciphers   on;         location / {             root   /home/wwwroot/fq.warsong.pw;             index  index.php index.html index.htm;         }     }include vhost/fq.warsong.pw.conf;}

Reply content:

As shown in the following figure, you can only access html pages When configuring openssl on LNMP. After accessing the PHP page, you can directly download the PHP file. What's going on?
My nginx. conf file is as follows:

user  www www;worker_processes auto;error_log  /home/wwwlogs/nginx_error.log  crit;pid        /usr/local/nginx/logs/nginx.pid;#Specifies the value for maximum file descriptors that can be opened by this process.worker_rlimit_nofile 51200;events    {        use epoll;        worker_connections 51200;        multi_accept on;    }http    {        include       mime.types;        default_type  application/octet-stream;        server_names_hash_bucket_size 128;        client_header_buffer_size 32k;        large_client_header_buffers 4 32k;        client_max_body_size 50m;        sendfile on;        tcp_nopush     on;        keepalive_timeout 60;        tcp_nodelay on;        fastcgi_connect_timeout 300;        fastcgi_send_timeout 300;        fastcgi_read_timeout 300;        fastcgi_buffer_size 64k;        fastcgi_buffers 4 64k;        fastcgi_busy_buffers_size 128k;        fastcgi_temp_file_write_size 256k;        gzip on;        gzip_min_length  1k;        gzip_buffers     4 16k;        gzip_http_version 1.0;        gzip_comp_level 2;        gzip_types       text/plain application/x-javascript text/css application/xml;        gzip_vary on;        gzip_proxied        expired no-cache no-store private auth;        gzip_disable        "MSIE [1-6]\.";        #limit_conn_zone $binary_remote_addr zone=perip:10m;        ##If enable limit_conn_zone,add "limit_conn perip 10;" to server section.        server_tokens off;        #log format        log_format  access  '$remote_addr - $remote_user [$time_local] "$request" '             '$status $body_bytes_sent "$http_referer" '             '"$http_user_agent" $http_x_forwarded_for';server    {        listen 80 default;        #listen [::]:80 default ipv6only=on;        server_name www.lnmp.org;        index index.html index.htm index.php;        root  /home/wwwroot/default;        #error_page   404   /404.html;        location ~ [^/]\.php(/|$)            {                # comment try_files $uri =404; to enable pathinfo                try_files $uri =404;                fastcgi_pass  unix:/tmp/php-cgi.sock;                fastcgi_index index.php;                include fastcgi.conf;                #include pathinfo.conf;            }        location /nginx_status {            stub_status on;            access_log   off;        }        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$            {                expires      30d;            }        location ~ .*\.(js|css)?$            {                expires      12h;            }        access_log  /home/wwwlogs/access.log  access;    }    server {         listen       443 ssl;         server_name  fq.warsong.pw;         ssl                  on;         ssl_certificate      1_fq.warsong.pw_bundle.crt;       ssl_certificate_key      2_fq.warsong.pw.key;       ssl_session_timeout  5m;         ssl_protocols  SSLv3 TLSv1;         ssl_ciphers  HIGH:!ADH:!EXPORT56:RC4+RSA:+MEDIUM;         ssl_prefer_server_ciphers   on;         location / {             root   /home/wwwroot/fq.warsong.pw;             index  index.php index.html index.htm;         }     }include vhost/fq.warsong.pw.conf;}

The second server does not seem to have configured PHP-related rules.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.