Nginx blocks sensitive directories for security protection Summary of pitfalls
Cause: A few days ago, I added a backend management function to my blog, and added a new SQLite database directory Mdata and cache directory Mcache. After the function ran smoothly, an idea suddenly popped up: What would happen if I directly accessed https://domain name/Mdata/content.db? After trying it, the browser started downloading a file - the database file was completely exposed. It contains all the articles…