From 6994bd148eb5d9f052740cc2b71e447c7aa06f54 Mon Sep 17 00:00:00 2001
From: anmol26s <github@datamol.org>
Date: Wed, 12 Sep 2018 11:19:41 +0530
Subject: [PATCH] Security fix

---
 conf/nginx.conf | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/conf/nginx.conf b/conf/nginx.conf
index 398f4ba..082df01 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -31,7 +31,13 @@ location __PATH__ {
     fastcgi_param SCRIPT_FILENAME $request_filename;
   }
   # PHP configuration end
-
+  
+  # Deny access to /data/config.ini.php
+    location = /data/config.ini.php {
+        deny all;
+        return 404;
+    }
+    
   # Include SSOWAT user panel.
   include conf.d/yunohost_panel.conf.inc;
 }