nginx虚拟主机防webshell跨目录

1.在nginx.conf里把每个虚拟主机站点请求端口给区别开
server
{
listen 80;
server_name www.key0.cn;
index index.html index.htm index.php;
root /var/www/test;

#limit_conn crawler 20;

location ~ .*.(php|php5)?$

{
#fastcgi_pass unix:/tmp/php-cgi.sock;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
include fcgi.conf;
}
}

server
{
listen 80;
server_name www.nginx.org;
index index.html index.htm index.php;
root /var/www/test1;

#limit_conn crawler 20;

location ~ .*.(php|php5)?$
{
#fastcgi_pass unix:/tmp/php-cgi.sock;
fastcgi_pass 127.0.0.1:9001;
fastcgi_index index.php;
include fcgi.conf;
}
}

#cp  /usr/local/php/etc/php-fpm.conf  /usr/local/php/etc/www.key0.cn.conf
#cp  /usr/local/php/etc/php-fpm.conf  /usr/local/php/etc/www.nginx.org.conf
www.key0.cn
在/usr/local/php/etc/www.key0.cn.conf找到php_defines,添加
edir”>/var/www/test:/tmp:/var/tmp
www.nginx.org
在/usr/local/php/etc/nginx.org.conf找到php_defines,添加
sedir”>/var/www/test1:/tmp:/var/tmp
修改为ddress”>127.0.0.1:9001   注意这里的端口号

补充:
spawn-fcgi -a 127.0.0.1 -p 9000 -C 9 -u www -f “/usr/local/php/bin/php-cgi -d open_basedir=/var/www/test:/tmp/”

转自:http://key0.cn