鍍金池/ 問答/網(wǎng)絡(luò)安全/ 請問: openresty(1.13.6.2)訪問站點安裝目錄出現(xiàn) 403 Fo

請問: openresty(1.13.6.2)訪問站點安裝目錄出現(xiàn) 403 Forbidden 怎么解決?

自己的生產(chǎn)環(huán)境:centos7,openresty,php,mysql

出現(xiàn)的問題:IP訪問是正常的,輸入ip/install顯示403 Forbidden,我給/usr/local/openresty/nginx/html目錄權(quán)限改為777還是不行,請問怎么解決這個問題呢?
剛剛發(fā)現(xiàn),50x.html也可以顯示,但是ip/install/index.php不能顯示.

如果我訪問my ip adress/install/index.php,結(jié)果是下載這個文件,請問怎么設(shè)置才能正確訪問index.php呢?

error.log 顯示:

2018/06/08 10:33:18 [error] 12018#12018: *334 directory index of "/usr/local/openresty/nginx/html/install/" is forbidden,

自己的nginx.conf 配置:

user  root;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;
    
    client_max_body_size 8m;    #允許客戶端請求的最大單文件字節(jié)數(shù)
    client_body_buffer_size 2m;  #緩沖區(qū)代理緩沖用戶端請求的最大字節(jié)

   #WAF
    lua_shared_dict limit 50m;  #防cc使用字典,大小50M
    lua_shared_dict guard_dict 100m;
    lua_shared_dict dict_captcha 70m;
    lua_max_running_timers 1;
    lua_package_path "/usr/local/openresty/nginx/conf/waf/?.lua";
    init_by_lua_file "/usr/local/openresty/nginx/conf/waf/init.lua";
    access_by_lua_file "/usr/local/openresty/nginx/conf/waf/access.lua";
   

    #keepalive_timeout  0;
    keepalive_timeout  65;

    gzip  on;

    server {
        listen       80;
        listen       [::]:80 default_server;
        server_name   my ip address;
        
        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        location / {

            root    html;
            index  index.html index.htm index.php;
        }


        location /phpmyadmin {
            alias /usr/share/phpMyAdmin;
            index index.php;
         }

       location ~ /phpmyadmin/.+\.php$ {
            if ($fastcgi_script_name ~ /phpmyadmin/(.+\.php.*)$) {
             set $valid_fastcgi_script_name $1;
            }
             include fastcgi_params;
             fastcgi_pass 127.0.0.1:9000;
             fastcgi_index index.php;
             fastcgi_param SCRIPT_FILENAME /usr/share/phpMyAdmin/$valid_fastcgi_script_name;
         }

       

        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

        # 這里新加的
        # PHP 腳本請求全部轉(zhuǎn)發(fā)到 FastCGI處理. 使用FastCGI協(xié)議默認配置.
        # Fastcgi服務(wù)器和程序(PHP,Python)溝通的協(xié)議.
        location ~ \.php$ {
            # 設(shè)置監(jiān)聽端口
            fastcgi_pass   127.0.0.1:9000;
            # 設(shè)置nginx的默認首頁文件(上面已經(jīng)設(shè)置過了,可以刪除)
            fastcgi_index  index.php;
            # 設(shè)置腳本文件請求的路徑
            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
            # 引入fastcgi的配置文件
            include        fastcgi_params;
        }

        # proxy the PHP scripts to Apache listening on 127.0.0.1:80
        #
        #location ~ \.php$ {
        #    proxy_pass   http://127.0.0.1;
        #}

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        #location ~ \.php$ {
        #    root           html;
        #    fastcgi_pass   127.0.0.1:9000;
        #    fastcgi_index  index.php;
        #    fastcgi_param  SCRIPT_FILENAME  /document_root$fastcgi_script_name;
        #    include        fastcgi_params;
        #}

        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #    deny  all;
        #}
    }


    # another virtual host using mix of IP-, name-, and port-based configuration
    #
    #server {
    #    listen       8000;
    #    listen       somename:8080;
    #    server_name  somename  alias  another.alias;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}


    # HTTPS server
    
    server {
        listen  443 ssl http2;
        
        server_name  my ip address;
        charset  utf-8;
        ssl on;
        default_type  text/plain;
        
       
       

       ssl_session_cache    shared:SSL:1m;
       ssl_session_timeout  5m;
       ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

       ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
       ssl_prefer_server_ciphers  on;

       location / {
            root   html;
           index  index.html index.htm index.php;
        }

         location ~ /phpmyadmin/.+\.php$ {
            if ($fastcgi_script_name ~ /phpmyadmin/(.+\.php.*)$) {
             set $valid_fastcgi_script_name $1;
            }
             include fastcgi_params;
             fastcgi_pass 127.0.0.1:9000;
             fastcgi_index index.php;
             fastcgi_param SCRIPT_FILENAME /usr/share/phpMyAdmin/$valid_fastcgi_script_name;
         }

       location ~ \.php$ {
            # 設(shè)置監(jiān)聽端口
            fastcgi_pass   127.0.0.1:9000;
            # 設(shè)置nginx的默認首頁文件(上面已經(jīng)設(shè)置過了,可以刪除)
            fastcgi_index  index.php;
            # 設(shè)置腳本文件請求的路徑
            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
            # 引入fastcgi的配置文件
            include        fastcgi_params;
        }


   }

}













回答
編輯回答
懷中人
  1. 你輸入 IP/install 出現(xiàn)403是因為你得 Nginx 配置沒有添加對應(yīng)的 location

    # 其他的配置項
    location /install {
        root html; # 或者 root html/install;
        index index.php;
        # 其他的配置項
    }
    # 其他的配置項

    如果你沒有這樣的 location,直接訪問 IP/install 會判定為在 'html' 目錄下查找 'install' 文件夾

  2. *.php 文件訪問時變成自動下載的原因一般都是 php-fpm 配置錯誤,或者 php-fpm 沒有 正常啟動監(jiān)聽
  3. 我上傳了現(xiàn)在可以正常使用的 Nginx 配置文件,可以在 這里 下載(密碼:8qrk)。
2018年6月21日 21:52
編輯回答
茍活

“如果我訪問my ip adress/install/index.php,結(jié)果是下載這個文件,請問怎么設(shè)置才能正確訪問index.php呢?”
nginx本身不能解析php語言的,應(yīng)該需要配合對應(yīng)的模塊才能解析Php,否則就當(dāng)作是一個文件來下載下來了。

2018年7月12日 14:14