Not all actions work as expected because of missing location, which should send all request with URI ^/admin/.*/backup_migrate/.*\.mysql to php-fpm before the next location which denies sql in the URI for security reasons.

Comments

omega8cc’s picture

omega8cc CreditAttribution: omega8cc commented
Status: Active » Needs review

This commit fixes the issue: http://drupalcode.org/sandbox/omega8cc/1111100.git/commit/51d51f0

anarcat’s picture

anarcat CreditAttribution: anarcat commented
Status: Needs review » Needs work

Isn't a permission deny exactly what we want here? We don't want the webserver to access those files... no?

omega8cc’s picture

omega8cc CreditAttribution: omega8cc commented
Status: Needs work » Reviewed & tested by the community

No, we don't want the access deny here. It is the opposite - we need to *open* the access here for URI starting with /admin so the next location will not deny URI with .mysql at the end. It is not a direct access to the file, as it goes via /admin.

Marking as RTBC because it was already tested before submitting here.

anarcat’s picture

anarcat CreditAttribution: anarcat commented
Status: Reviewed & tested by the community » Fixed

Understood, merged in 1.x and 2.x.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

  • Commit b19d5f7 on 7.x-2.x, dev-ssl-ip-allocation-refactor, dev-1205458-move_sites_out_of_platforms, 7.x-3.x, dev-subdir-multiserver, 6.x-2.x-backports, dev-helmo-3.x authored by omega8cc, committed by anarcat: 
    Issue #1182680 - Nginx config fix - better support for backup_migrate...
  • Commit dd584c8 on 6.x-1.x, dev-ssl-ip-allocation-refactor, dev-1205458-move_sites_out_of_platforms, 7.x-3.x, dev-subdir-multiserver, 6.x-2.x-backports, dev-helmo-3.x authored by omega8cc, committed by anarcat:
    Issue #1182680 - Nginx config fix - better support for backup_migrate...