Just got this. The email preview, is this how it really looks?
Looks really bad, was expecting better D:
Anyone got any templates I could use, that matches the IPS emails..?
Any chance on adding support to "Rules" ?
I have a group upgrade in the rules, that checks for posts, rep etc -- i'd like to require them to referer at least 5 members...
please add option to edit those features:
Max File Size
Enable/Disable remote URL input
Enable/Disable Auto Play (User Setting) & Per Group setting (default, disabled)
Welp.
I want to allow the users to upload photos though?
i do not allow users to upload files at all, but i believe same exploit exists in gallery and avatar.
I have these rules.. I'm safe?
server {
server_name domain.net www.domain.net;
add_header X-Content-Type-Options "nosniff" always;
add_header X-Xss-Protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff" always;
# ngx_pagespeed & ngx_pagespeed handler
#include /usr/local/nginx/conf/pagespeed.conf;
#include /usr/local/nginx/conf/pagespeedhandler.conf;
#include /usr/local/nginx/conf/pagespeedstatslog.conf;
root /home/nginx/domains/domain.net/public;
include /usr/local/nginx/conf/cloudflare.conf;
location ~ (?:^|/)\. {
deny all;
}
location / {
include /usr/local/nginx/conf/block.conf;
try_files $uri $uri/ /index.php;
}
# IP.Board PHP/CGI Protection
# Allow Access to Interface Files
# Add Your Specific Application to the List if you Add New Applications
location ~^(/applications/(blog|calendar|chat|cms|core|downloads|forums|gallery|nexus|pastebin|companydirectory|rules|videos|notes|iawards|links|pmviewer|readthattopic|rules)/interface/).*(\.php)$ {
allow all;
include /usr/local/nginx/conf/php.conf;
}
# Block Access to PHP / PHTML Files
location ~ ^/(uploads|datastore|system|plugins)/.*\.(?:php\d*|phtml)$ {
deny all;
}
# Block Access to Application PHP / PHTML Files
# Add Your Specific Application to the List if you Add New Applications
location ~ ^/applications/(blog|calendar|chat|cms|core|downloads|forums|gallery|nexus|pastebin|companydirectory|rules|videos|notes|iawards|links|pmviewer|readthattopic|rules)/.*\.(?:php\d*|phtml)$ {
allow 127.0.0.1;
deny all;
}
location ~* /phpMyAdmin {
deny all;
include /usr/local/nginx/conf/php.conf;
}
include /usr/local/nginx/conf/staticfiles.conf;
include /usr/local/nginx/conf/php.conf;
include /usr/local/nginx/conf/drop.conf;
#include /usr/local/nginx/conf/errorpage.conf;
include /usr/local/nginx/conf/vts_server.conf;
}