Single PHP entry point with Nginx

Comparing #1 with #2

Revision #2 was created by MadAnd MadAnd on Apr 28, 2015, 1:58:30 PM.

typo fixes

Content

[...]
Security
--------

One may ask how this rather subtle configuration change affects security. Here is a little example. Imagine you have written and application, which among other things allows users to upload some files.
Now, if you "forgot" to implement strict validation rules, malicious user could potentially
upload (exploiting e.g. some NUL char vulnerability) file `shell.php` into the
server's `uploads` folder.

Now the malicious user opens the URL: `http://yourapp.net/uploads/shell.php`
[...]