Nginx 访问控制 1、限制指定目录扩展名后缀location ~ ^/images/.*\.(php|php5|sh|pl|py)$ { deny all; } location ~ ^/static/.*\.(php|php5|sh|pl|py)$ { deny all; }2、禁止直接访问txt和doc文件location ~* \.(txt|doc)$ { if (-f $request_filename) { root /data/www/www; rewrite ^(.*) https://hiyae.com/ break; #可以重定向到某个URL; } } location ~* \.(txt|doc)$ { root /data/www/www; deny all; }3、禁止访问文件和目录#禁止访问的文件或目录 location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md) { return 404; }4、排除某个目录不受限制location ~ \.well-known{ allow all; }5、禁止访问单个目录的命令location ~ ^/(static)/ { deny all; } location ~ ^/static { deny all; }6、禁止访问多个目录的配置location ~ ^/(static|js) { deny all; }7、禁止目录让外界访问location ~ ^/mysql_loging/ { allow 192.168.1.2; deny all; } location ~ .*\.(php|php5)?$ { fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; include fastcgi_params; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; } # 说明:该配置只允许IP 192.168.1.2 访问mysql_loging目录8、限制IP和IP段location / { deny 192.168.0.1; allow 192.168.1.0/16; allow 10.0.0.0/24; deny all; } # 说明：此限制是对某些IP做整个网站的限制访问。9、非指定域名访问跳转if ($host !~ ^www/.hiyae/.com$) { rewrite ^(.*) https://www.hiyae.com$1 permanent; }

设置Nginx referer实现重定向跳转和屏蔽跳转 1.禁止BING来路，直接404if ($http_referer ~ 'bing.com') { return 404; }2.百度和谷歌来路的都跳转到首页if ($http_referer ~* "www.baidu.com") { rewrite ^/(.*)$ https://hiyae.com redirect; } if ($http_referer ~* "www.google.com") { rewrite ^/(.*)$ https://hiyae.com redirect; }

Linux MySQL服务控制 1.重启MYSQL服务service mysqld restart2./etc/inint.d/mysqld restart2、停止MYSQL服务service mysqld stop或者/etc/inint.d/mysqld stop3、启动MYSQL服务service mysqld start或者/etc/inint.d/mysqld start4、重载MYSQL配置/etc/init.d/mysqld reload

查看linux内核版本 1、uname -a3.10.0-957.el7.x86_64 #1 SMP Thu Nov 8 23:39:32 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux2、cat /proc/versionLinux version 3.10.0-957.el7.x86_64 ([email protected]) (gcc version 4.8.5 20150623 (Red Hat 4.8.5-36) (GCC) ) #1 SMP Thu Nov 8 23:39:32 UTC 20183、cat /etc/redhat-releaseCentOS Linux release 7.6.1810 (Core)

设置Nginx环境屏蔽禁止文件名后缀访问 1.屏蔽文件名后缀location ~* \.(html|htm|asa|asp)$ { deny all; } 2.屏蔽指定目录下的文件名后缀location ~ ^/include/.*\.(txt|py|html)$ { deny all; }