Deny wp-config.txt

12 years ago · e25bdb7d2a
1 changed files with 7 additions and 0 deletions
--- a/etc/nginx/common/wpcommon.conf
+++ b/etc/nginx/common/wpcommon.conf
@ -8,6 +8,13 @@ location = /wp-login.php {
 	fastcgi_pass php;
 }

+# Disable wp-config.txt
+location = /wp-config.txt {
+	deny  all;
+	access_log off;
+	log_not_found off;
+}
+
 # Disallow PHP In Upload Folder
 location /wp-content/uploads/ {
 	location ~ \.php$ {