Block direct access to ESDs

bcremer · Dec 17, 2014 · 7477bec · 7477bec
1 parent ec8531e
commit 7477bec
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/global/shopware.conf b/global/shopware.conf
@@ -45,6 +45,14 @@ location ^~ /files/documents/ {
     deny all;
 }
 
+# Block direct access to ESDs, but allow the follwing download options:
+#  * 'PHP' (slow)
+#  * 'X-Accel' (optimized)
+# Also see http://wiki.shopware.com/ESD_detail_1116.html#Ab_Shopware_4.2.2
+location ^~ /files/552211cce724117c3178e3d22bec532ec/ {
+    internal;
+}
+
 # Breaks backend/media/ rewrite
 #
 #location ~ /(engine|files|templates|media)/ {