LAMP-php解析與user_agent
阿新 • • 發佈：2017-08-04
user-agent
/* */ ~]# cat /data/www/123.com/upload/upload
<?php
echo "123.com";
?>一、限定某個目錄禁止解析php
並不是所有的網站目錄是需要解析php的，比如上傳圖片的目錄等。禁止解析php能夠防止被攻擊者以php的方式搞破壞。
1、配置虛擬主機
[[email protected] ~]# vi /usr/local/apache2.4/conf/extra/httpd-vhosts.conf
<VirtualHost *:80>
DocumentRoot "/data/www/123.com"
ServerName 123.com
ErrorLog "logs/123.com-error_log"
CustomLog "logs/123.com-access_log" common
<Directory /data/www/123.com/upload>
php_admin_flag engine off ##upload目錄中的php不解析
<FilesMatch (.*)\.php(.*)>
Order allow,deny
deny from all ##所有.php文件拒絕訪問
</FilesMatch>
</Directory>
</VirtualHost>2、檢查重新加載
[[email protected] ~]# /usr/local/apache2.4/bin/apachectl -t Syntax OK [[email protected] ~]# /usr/local/apache2.4/bin/apachectl graceful [[email protected] ~]# ls /data/www/123.com/upload 1.php upload [[email protected] ~]# cat /data/www/123.com/upload/1.php <?php echo "123.com"; ?> [[email protected]
3、測試驗證
[[email protected] ~]# curl -x127.0.0.1:80 123.com/1.php 123.com [[email protected] ~]# curl -x127.0.0.1:80 123.com/upload/1.php <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>403 Forbidden</title> </head><body> <h1>Forbidden</h1> <p>You don‘t have permission to access /upload/1.php on this server.<br /> </p> </body></html> [[email protected]