Ravi Sir's Cyber Security Cards › Revision Cards
LEMP on Amazon Linux 2023
LEMP on Amazon Linux 2023 LEMP = Linux + Nginx (“Engine-X”) + MySQL/MariaDB + PHP. Nginx sends PHP work to PHP-FPM . Add try_files $uri =404; in the PHP block. An old mistake let attackers run an uploaded image as PHP, like /uploads/cat.jpg/x.php . This line stops it. Leaving info.php (phpinfo) on t
Read card text
What this card says
What it is
LEMP = Linux + Nginx (“Engine-X”) + MySQL/MariaDB + PHP. Nginx sends PHP work to PHP-FPM.
Why it matters for security
Add try_files $uri =404; in the PHP block.
An old mistake let attackers run an uploaded image as PHP, like /uploads/cat.jpg/x.php. This line stops it.
Common mistake
Leaving info.php (phpinfo) on the server. It shows PHP version, paths and settings to everyone. Delete it after testing.
Learn more in the lesson: 9.5 LEMP on Amazon Linux 2023