What best way to ignore all php requests coming to RoR project?
0
For example, there are such obviously unnecessary requests:
> tail -f log/production.log
ActionController::RoutingError (No route matches [GET] "/wp-login.php"):
Started GET "/wp-login.php" for 95.96.26.49 at 2018-11-14 01:20:22 +0300
ActionController::RoutingError (No route matches [GET] "/wp-login.php"):
Started GET "/wp-login.php" for 109.81.213.45 at 2018-11-14 01:28:27 +0300
And I want to disable this way for hack-requests, how can I do it?
Or may be other global way to prevent such?
ruby-on-rails nginx
asked Nov 14 '18 at 9:26
shilovkshilovk
5,125134257
add a comment |
0
For example, there are such obviously unnecessary requests:
> tail -f log/production.log
ActionController::RoutingError (No route matches [GET] "/wp-login.php"):
Started GET "/wp-login.php" for 95.96.26.49 at 2018-11-14 01:20:22 +0300
ActionController::RoutingError (No route matches [GET] "/wp-login.php"):
Started GET "/wp-login.php" for 109.81.213.45 at 2018-11-14 01:28:27 +0300
And I want to disable this way for hack-requests, how can I do it?
Or may be other global way to prevent such?
ruby-on-rails nginx
asked Nov 14 '18 at 9:26
shilovkshilovk
5,125134257
They are already rejected by your app's router. Is that not enough?
– Sergio Tulentsev
Nov 14 '18 at 9:35
@SergioTulentsev Well, then how is it better way to globally ignoring such php requests for minimally spent resources of server? I assume it is necessary must be in nginx?
– shilovk
Nov 14 '18 at 9:49
1
Indeed, dropping them at nginx would be best.
– Sergio Tulentsev
Nov 14 '18 at 9:55
add a comment |
0
0
0
For example, there are such obviously unnecessary requests:
> tail -f log/production.log
ActionController::RoutingError (No route matches [GET] "/wp-login.php"):
Started GET "/wp-login.php" for 95.96.26.49 at 2018-11-14 01:20:22 +0300
ActionController::RoutingError (No route matches [GET] "/wp-login.php"):
Started GET "/wp-login.php" for 109.81.213.45 at 2018-11-14 01:28:27 +0300
And I want to disable this way for hack-requests, how can I do it?
Or may be other global way to prevent such?
ruby-on-rails nginx
asked Nov 14 '18 at 9:26
shilovkshilovk
5,125134257
For example, there are such obviously unnecessary requests:
> tail -f log/production.log
ActionController::RoutingError (No route matches [GET] "/wp-login.php"):
Started GET "/wp-login.php" for 95.96.26.49 at 2018-11-14 01:20:22 +0300
ActionController::RoutingError (No route matches [GET] "/wp-login.php"):
Started GET "/wp-login.php" for 109.81.213.45 at 2018-11-14 01:28:27 +0300
And I want to disable this way for hack-requests, how can I do it?
Or may be other global way to prevent such?
ruby-on-rails nginx
ruby-on-rails nginx
asked Nov 14 '18 at 9:26
shilovkshilovk
5,125134257
asked Nov 14 '18 at 9:26
shilovkshilovk
5,125134257
edited Nov 14 '18 at 10:53
shilovk
asked Nov 14 '18 at 9:26
shilovkshilovk
5,125134257
asked Nov 14 '18 at 9:26
shilovkshilovk
5,125134257
asked Nov 14 '18 at 9:26
shilovkshilovk
5,125134257
5,125134257
They are already rejected by your app's router. Is that not enough?
– Sergio Tulentsev
Nov 14 '18 at 9:35
@SergioTulentsev Well, then how is it better way to globally ignoring such php requests for minimally spent resources of server? I assume it is necessary must be in nginx?
– shilovk
Nov 14 '18 at 9:49
1
Indeed, dropping them at nginx would be best.
– Sergio Tulentsev
Nov 14 '18 at 9:55
add a comment |
They are already rejected by your app's router. Is that not enough?
– Sergio Tulentsev
Nov 14 '18 at 9:35
@SergioTulentsev Well, then how is it better way to globally ignoring such php requests for minimally spent resources of server? I assume it is necessary must be in nginx?
– shilovk
Nov 14 '18 at 9:49
1
Indeed, dropping them at nginx would be best.
– Sergio Tulentsev
Nov 14 '18 at 9:55
They are already rejected by your app's router. Is that not enough?
– Sergio Tulentsev
Nov 14 '18 at 9:35
They are already rejected by your app's router. Is that not enough?
– Sergio Tulentsev
Nov 14 '18 at 9:35
@SergioTulentsev Well, then how is it better way to globally ignoring such php requests for minimally spent resources of server? I assume it is necessary must be in nginx?
– shilovk
Nov 14 '18 at 9:49
@SergioTulentsev Well, then how is it better way to globally ignoring such php requests for minimally spent resources of server? I assume it is necessary must be in nginx?
– shilovk
Nov 14 '18 at 9:49
1
1
Indeed, dropping them at nginx would be best.
– Sergio Tulentsev
Nov 14 '18 at 9:55
Indeed, dropping them at nginx would be best.
– Sergio Tulentsev
Nov 14 '18 at 9:55
add a comment |
2 Answers
2
active
oldest
votes
2
To block in nginx.conf
location ~ .php {
return 404;
}
edited Nov 18 '18 at 21:26
shilovk
5,125134257
answered Nov 14 '18 at 9:36
Sikandar TariqSikandar Tariq
415514
add a comment |
1
You can use rack-attack gem as well for this, which can be handled a layer above than rails.
blocklist('block all urls ending with .php') do |req|
req.path.match(/.php$/)
end
answered Nov 14 '18 at 10:32
NithinNithin
2,97231848
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53296819%2fwhat-best-way-to-ignore-all-php-requests-coming-to-ror-project%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
2
To block in nginx.conf
location ~ .php {
return 404;
}
edited Nov 18 '18 at 21:26
shilovk
5,125134257
answered Nov 14 '18 at 9:36
Sikandar TariqSikandar Tariq
415514
add a comment |
2
To block in nginx.conf
location ~ .php {
return 404;
}
edited Nov 18 '18 at 21:26
shilovk
5,125134257
answered Nov 14 '18 at 9:36
Sikandar TariqSikandar Tariq
415514
add a comment |
2
2
2
To block in nginx.conf
location ~ .php {
return 404;
}
edited Nov 18 '18 at 21:26
shilovk
5,125134257
answered Nov 14 '18 at 9:36
Sikandar TariqSikandar Tariq
415514
To block in nginx.conf
location ~ .php {
return 404;
}
edited Nov 18 '18 at 21:26
shilovk
5,125134257
answered Nov 14 '18 at 9:36
Sikandar TariqSikandar Tariq
415514
edited Nov 18 '18 at 21:26
shilovk
5,125134257
edited Nov 18 '18 at 21:26
shilovk
5,125134257
edited Nov 18 '18 at 21:26
shilovk
5,125134257
5,125134257
answered Nov 14 '18 at 9:36
Sikandar TariqSikandar Tariq
415514
answered Nov 14 '18 at 9:36
Sikandar TariqSikandar Tariq
415514
answered Nov 14 '18 at 9:36
Sikandar TariqSikandar Tariq
415514
415514
add a comment |
add a comment |
1
You can use rack-attack gem as well for this, which can be handled a layer above than rails.
blocklist('block all urls ending with .php') do |req|
req.path.match(/.php$/)
end
answered Nov 14 '18 at 10:32
NithinNithin
2,97231848
add a comment |
1
You can use rack-attack gem as well for this, which can be handled a layer above than rails.
blocklist('block all urls ending with .php') do |req|
req.path.match(/.php$/)
end
answered Nov 14 '18 at 10:32
NithinNithin
2,97231848
add a comment |
1
1
1
You can use rack-attack gem as well for this, which can be handled a layer above than rails.
blocklist('block all urls ending with .php') do |req|
req.path.match(/.php$/)
end
answered Nov 14 '18 at 10:32
NithinNithin
2,97231848
You can use rack-attack gem as well for this, which can be handled a layer above than rails.
blocklist('block all urls ending with .php') do |req|
req.path.match(/.php$/)
end
answered Nov 14 '18 at 10:32
NithinNithin
2,97231848
answered Nov 14 '18 at 10:32
NithinNithin
2,97231848
answered Nov 14 '18 at 10:32
NithinNithin
2,97231848
answered Nov 14 '18 at 10:32
NithinNithin
2,97231848
2,97231848
add a comment |
add a comment |
draft saved
draft discarded
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53296819%2fwhat-best-way-to-ignore-all-php-requests-coming-to-ror-project%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
They are already rejected by your app's router. Is that not enough?
– Sergio Tulentsev
Nov 14 '18 at 9:35
@SergioTulentsev Well, then how is it better way to globally ignoring such php requests for minimally spent resources of server? I assume it is necessary must be in nginx?
– shilovk
Nov 14 '18 at 9:49
1
Indeed, dropping them at nginx would be best.
– Sergio Tulentsev
Nov 14 '18 at 9:55