Re: block php requests

2015-01-22 Thread Collin Anderson
Hi, I had broken link emails enabled for a while. Over time, my nginx.conf config grew into this: location /_vti_inf.html { return 404; } location /crossdomain.xml { return 404; } location ~/cache/eb91756ae6745d22433f80be4ec59445$ { return 404; } # some sort of plugin? location

Re: block php requests

2015-01-21 Thread hinnack
Hi, thanks for your reply. Blocking all requests in Apache seems to be the best way. Can you give an example how to do that? As / is mapped to the wsgi app ( https://docs.djangoproject.com/en/1.7/howto/deployment/wsgi/modwsgi/ ) and a new files section does not the trick: #PHP p

Re: block php requests

2015-01-20 Thread Avraham Serour
you can tell apache to get any request ending with .php and return 404 from apache without passing the request to django you could return something else like 403 and ban the ip for some time On Tue, Jan 20, 2015 at 1:55 PM, hinnack wrote: > Hi, > > I get a lot of intrusion checks on my website -