Securing php-fpm with nginx

[LuDo8]

Fortunately, the vulnerable servers are easy do identify and fix. Example: http://example.com/path/to/file.png ? a static object served by the vulnerable server. A crafted request to http://example.com/path/to/file.png/index.php for example should return 404. If it returns 500, then thing?s are bad. Worse though if it?s a 2xx or 3xx aka file.png = valid PHP.

So I go to my http://mywebsite.com/images/picture.png/index.php, and it gives me a bunch of codes, I'm guessing Nginx is vulnerable.

Whats the fix? The article wasn't exactly clear and simple.

LuDo8 Reviewed by LuDo8 on 29th Aug 2011. Securing php-fpm with nginx Found this one while searching how to secure php-fpm. Source: https://nealpoole.com/blog/2011/04/setting-up-php-fastcgi-and-nginx-dont-trust-the-tutorials-check-your-configuration/ Rating: 5