We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 73edfc4 commit 77edd51Copy full SHA for 77edd51
modules/nginx/sites/production.txt
@@ -430,6 +430,11 @@ location ~* ^/(?!topics/feed/?$|feed/?$).+/(feed|atom|rss2)/?$ {
430
431
location ~* \.php$ {
432
433
+ ## allow only valid wordpress php entry points ##
434
+ if ($uri !~ ^/(index\.php|wp-login\.php|wp-comments-post\.php|wp-signup\.php|wp-activate\.php|wp-admin/.*\.php)$) {
435
+ return 444;
436
+ }
437
+
438
## rate limiting for php requests ##
439
limit_req zone=php_second burst=@LIMIT_REQUESTS_PHP_SECOND_BURST nodelay;
440
limit_req zone=php_minute burst=@LIMIT_REQUESTS_PHP_MINUTE_BURST nodelay;
0 commit comments