Created
August 26, 2013 08:05
-
-
Save un1ko85/6339063 to your computer and use it in GitHub Desktop.
Nginx WP AntiBrute + PHP CGI
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| location ~* /(wp-login\.php|administrator|admin\.php) { | |
| set $humantest 0; | |
| if ($http_cookie !~* "humans=fucking_love_cookies") { | |
| set $humantest 1; | |
| } | |
| if ($args ~* (callback|logout|lostpassword)) { | |
| set $humantest 0; | |
| } | |
| if ($humantest = 1) { | |
| add_header Content-Type text/html; | |
| return 200 "<html><body><script>document.cookie='humans=fucking_love_cookies;path=/';location.reload();</script></body></html>"; | |
| } | |
| if ($humantest = 0) { | |
| @fastcgi; | |
| } | |
| } | |
| location ~ \.php$ { | |
| @fastcgi; | |
| } | |
| location @fastcgi { | |
| try_files $uri =404; | |
| fastcgi_split_path_info ^(.+\.php)(/.+)$; | |
| fastcgi_pass 127.0.0.1:9000; | |
| #fastcgi_pass unix:/tmp/php5-fpm.sock; | |
| fastcgi_index index.php; | |
| #fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; | |
| fastcgi_param SCRIPT_FILENAME $request_filename; | |
| fastcgi_param PHP_ADMIN_VALUE "open_basedir = $document_root:/usr/share/php5:/usr/share/php:/tmp:/usr/share/php"; | |
| fastcgi_connect_timeout 20; | |
| fastcgi_send_timeout 30; | |
| fastcgi_read_timeout 30; | |
| fastcgi_buffer_size 256k; | |
| fastcgi_buffers 4 256k; | |
| fastcgi_busy_buffers_size 256k; | |
| fastcgi_temp_file_write_size 256k; | |
| fastcgi_intercept_errors on; | |
| #fastcgi_param HTTPS on; | |
| # comment out PATH_TRANSLATED line if /usr/local/lib/php.ini sets following: | |
| # cgi.fix_pathinfo=0 | |
| # as of centminmod v1.2.3-eva2000.01 default is set to cgi.fix_pathinfo=1 | |
| # added by Ark | |
| fastcgi_param CATCH_WORKER_OUTPUT yes; | |
| fastcgi_param PATH_INFO $fastcgi_path_info; | |
| fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info; | |
| fastcgi_param QUERY_STRING $query_string; | |
| fastcgi_param REQUEST_METHOD $request_method; | |
| fastcgi_param CONTENT_TYPE $content_type; | |
| fastcgi_param CONTENT_LENGTH $content_length; | |
| fastcgi_param SCRIPT_NAME $fastcgi_script_name; | |
| fastcgi_param REQUEST_URI $request_uri; | |
| fastcgi_param DOCUMENT_URI $document_uri; | |
| fastcgi_param DOCUMENT_ROOT $document_root; | |
| fastcgi_param SERVER_PROTOCOL $server_protocol; | |
| fastcgi_param GATEWAY_INTERFACE CGI/1.1; | |
| fastcgi_param SERVER_SOFTWARE nginx/$nginx_version; | |
| fastcgi_param REMOTE_ADDR $remote_addr; | |
| fastcgi_param REMOTE_PORT $remote_port; | |
| fastcgi_param SERVER_ADDR $server_addr; | |
| fastcgi_param SERVER_PORT $server_port; | |
| fastcgi_param SERVER_NAME $server_name; | |
| # PHP only, required if PHP was built with --enable-force-cgi-redirect | |
| fastcgi_param REDIRECT_STATUS 200; | |
| } |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment