-
-
Save hlashbrooke/89adb00d530aea5bc66d to your computer and use it in GitHub Desktop.
location ~* ^/podcast-download/ { | |
try_files $uri $uri/ | |
fastcgi_index /index.php; | |
include fastcgi_params; | |
fastcgi_pass 127.0.0.1:9000; | |
} | |
location ~* ^/podcast-player/ { | |
try_files $uri $uri/ | |
fastcgi_index /index.php; | |
include fastcgi_params; | |
fastcgi_pass 127.0.0.1:9000; | |
} |
Hi @hlashbrooke could you please reconsider this Gist. Please take a look here:
https://github.com/TheCraigHewitt/Seriously-Simple-Podcasting/issues/131
tldr;
The above config is a security risk and to unflexible, use this instead:
# Seriously Simple Podcasting
rewrite podcast-download/([^/]+)/([^/]*)/? /index.php?podcast_episode=$1 break;
rewrite podcast-player/([^/]+)/([^/]*)/? /index.php?podcast_episode=$1&podcast_ref=player break;
The nginx config in your gist opens up some attack vectors on nginx + php-fpm servers that could be avoided easily. As this gist is directly linked on the help pages of the simple podcasting plugin changing it here should do the trick.
Thanks,
Jan
Is there any way for the "rewrite" to be configured for all domains and subdomains of the Server?
Thanks. Work
I've only encountered this issue now for some reason? Everything was working fine then all of a sudden media not found.
Any idea if there is an official fix for this yet?
My site is deployed on Kubernetes so can't really edit my nginx. Any way this can be done through Wordpress files?
This is to be put in the
server
directive for your site running Seriously Simple Podcasting. It basically tells all requests to thepodcast-download
andpodcast-player
endpoints to process as a.php
file, even though the URL states that it is an.mp3
, and bypasses it through to PHP-FPM.You may need to change
fastcgi_pass 127.0.0.1:9000;
to match that of your PHP-FPM configuration.