changes

2026-04-08 14:14:38 +05:00
parent bd28fc60d7
commit 169a2f5654
35 changed files with 2679 additions and 17 deletions
@@ -62,6 +62,17 @@ server {
        try_files $uri /index.php?$args;
    }

+    # ========================================================================
+    # VIKON MODULE SECURITY — Block executable files in module directories
+    # MUST be placed BEFORE location ~ \.php$ to take effect
+    # ========================================================================
+
+    location ~ ^/(sveden|abitur)/.*\.(php|php3|php4|php5|php7|php8|phps|phtml|pl|py|pyc|cgi|sh|bash|bat|cmd|exe|com|ps1|psm1|rb|asp|aspx|jsp|cfm)$ {
+        deny all;
+        return 403;
+        access_log /var/log/nginx/blocked_module_scripts.log;
+    }
+
    location /sveden/ {
        alias /var/www/public/sveden/;
        index index.html;