thirtybees (and prestashop) on nginx expose tpl and other files?

[Beeta]

I think that all the prestashop (and thirtybees?) nginx configuration I saw publicized are exposing tpl files.

Please test is your thirtybees installation is doing with this link (change the domain and theme dir)

https://domain.com/themes/themedir/404.tpl

If the .tpl file get downloaded your template files are exposed.

to block this behavior add this o your vhost nginx configuration file:

location ~* \.tpl$ { deny all; }

the only post I saw that talk about blocking tpl and others file types inside tb and ps installation is this: https://www.prestashop.com/forums/topic/351975-using-nginx-with-ps-16-what-to-pay-attention-to/#comment-1775268

[dosbiner]

Oh my, you right. Thank you for the tips, will update my nginx configuration ?