Skip to content

Add system check warnings for php-fpm and nginx if config files are accessible #13589

@Findus23

Description

@Findus23

Matomo can be used with Nginx instead of Apache.
As Nginx doesn't recognize .htaccess (by default) it is important to use a proper nginx config that blocks access to e.g. tmp/.

Therefore I'd suggest detecting nginx during the installer and show a notice to the admin urging them to take a look at the Matomo nginx config.

One way to detect it would be using $_SERVER["SERVER_SOFTWARE"] which returns nginx/1.14.0 for me. While it isn't 100% accurate, it should be okay for a notice.

Metadata

Metadata

Assignees

Labels

Help wantedBeginner friendly issues or issues where we'd highly appreciate community's help and involvement.c: SecurityFor issues that make Matomo more secure. Please report issues through HackerOne and not in Github.c: UsabilityFor issues that let users achieve a defined goal more effectively or efficiently.

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions