Just noticed files with restricted permissions set in webgui are still being served.

The apache modperl is working correctly and stops the file from being served. The nginx does not seem to be following the rules set in the config.

I am guessing the line with .wgaccess is the issue. Does anyone have a solution for this? The nginx used is 1.4.2.

Here is the config that I think is the problem.

location /uploads {
		expires 2h;
		if ( $request_filename ~ "^(.*/)" ) {
			set $request_directory $document_root$1;
		}
		if ( -f "$request_directory/.wgaccess" ) {
			proxy_pass http://127.0.0.1:8081;
		}
	}

Anyone else encounter this same issue with nginx?

P.V.Anthony

--- (Edited on 25-September-2013 4:29 pm [GMT+0800] by pvanthony) ---