NGINX + Matomo + wrong password

Hi,

short question, may someone can give me a hint. my matomo installation redirects badly when someone is pasting in wrong credentials. Actually this should be led to a “wrong password” page in matomo, but it leads to a 403 or 500er server failure page.

https://yyy.yyy/index.php?module=Login is one path. e.g

This is the nginx conf.

    index index.php;

 location ~^/(index|matomo|piwik|js/index|plugins/HeatmapSessionRecording/configs)\.php$ {
              try_files  $fastcgi_script_name =404; # protects against CVE-2019-11043. 
fastcgi_param HTTP_PROXY ""; 
{FASTCGIPASS}
    }


    location / {
        try_files $uri $uri/ =404;
    }

    location ~ ^/(config|tmp|core|lang) {
        deny all;
        return 404;
    }


    location ~ js/container_.*_preview\.js$ {
        expires off;
        add_header Cache-Control 'private, no-cache, no-store';
    }

    location ~ \.(gif|ico|jpg|png|svg|js|css|htm|html|mp3|mp4|wav|ogg|avi|ttf|eot|woff|woff2|json)$ {
        allow all;
        expires 1h;
        add_header Pragma public;
        add_header Cache-Control "public";
    }

    location ~ ^/(libs|vendor|plugins|misc|node_modules) {
        deny all;
        return 403;
    }

    location ~/(.*\.md|LEGALNOTICE|LICENSE) {
        default_type text/plain;
    }

thanks in advance

1 post - 1 participant

Read full topic