blok scanners for php

This commit is contained in:
Artur Kuś 2026-03-12 21:51:27 +01:00
parent d2e7376130
commit 7442fad6fc
3 changed files with 34 additions and 0 deletions

View File

@ -11,6 +11,17 @@ server {
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5;
# --- BLOCK COMMON SCANNERS / BOT ATTACKS ---
location ~* ^/(wp-admin|wp-content|wp-includes|xmlrpc\.php|phpmyadmin|vendor|setup|config|\.env|\.git|\.gitignore|\.htaccess|\.DS_Store|shell\.php|test\.php|admin\.php|login\.php) {
return 404;
}
location ~* \.php$ {
return 404;
}
# --- GŁÓWNY PROXY / Node.js ---
location / {
location / {

View File

@ -11,6 +11,17 @@ server {
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5;
# --- BLOCK COMMON SCANNERS / BOT ATTACKS ---
location ~* ^/(wp-admin|wp-content|wp-includes|xmlrpc\.php|phpmyadmin|vendor|setup|config|\.env|\.git|\.gitignore|\.htaccess|\.DS_Store|shell\.php|test\.php|admin\.php|login\.php) {
return 404;
}
location ~* \.php$ {
return 404;
}
# --- GŁÓWNY PROXY / Node.js ---
location / {
# Ograniczenie liczby żądań
limit_req zone=ip_limit burst=20 nodelay;

View File

@ -11,6 +11,18 @@ server {
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5;
# --- BLOCK COMMON SCANNERS / BOT ATTACKS ---
location ~* ^/(wp-admin|wp-content|wp-includes|xmlrpc\.php|phpmyadmin|vendor|setup|config|\.env|\.git|\.gitignore|\.htaccess|\.DS_Store|shell\.php|test\.php|admin\.php|login\.php) {
return 404;
}
# blokada wszystkich plików PHP (Node.js nie obsługuje)
location ~* \.php$ {
return 404;
}
# --- GŁÓWNY PROXY / Node.js ---
location / {
# Ograniczenie liczby żądań