- limit access only to localhost

Changed files:
    lighttpd-mod_status.conf -> 1.3

diff --git a/lighttpd-mod_status.conf b/lighttpd-mod_status.conf
index ab64104f28cc257647e091f2bb569411584e5b00..324ba00fd9e547c873cf613269c3233f5e0a9634 100644 (file)
--- a/lighttpd-mod_status.conf
+++ b/lighttpd-mod_status.conf
@@ -6,3 +6,10 @@ server.modules += (
 status.status-url = "/server-status"
 status.config-url = "/server-config"
 status.statistics-url = "/server-stats"
+
+# limit access only to localhost
+$HTTP["url"] =~ "^/server-(?status|config|stats)" {
+    $HTTP["remoteip"] != "127.0.0.1" {
+        url.access-deny = ( "" )
+    }
+}