www 权限

eustao

我安装了LNMP 1.3，在添加virtual host 时候，我写了mydomain.com 和 www.mydomain.com.
我用了一个商用系统，现在有一个地方出错。该商用软件的技术人员帮我调试的时候，说我的www权限没有全部开启。原因是：

如果用以下网址（不带www）登录管理后台：
http://mydomain.com/admin.php
如附件图1所示，有登录验证码显示出来。

如果用以下网址（带www）登录管理后台：
http://www.mydomain.com/admin.php
如附件图2所示，没有登录验证码显示出来。

因此，他们说我的www权限不够。


请问怎么设置www权限？

[ 本帖最后由 eustao 于 2017-1-18 14:30 编辑 ]

eustao

会是伪静态问题吗？我目前伪静态用的是Nginx官方针对Drupal 8 的文件

1. #if (!-e $request_filename) {
   
2. #      rewrite ^/(.*)$ /index.php?q=$1 last;
   
3. #    }
   
4. 
   
5.     location = /favicon.ico {
   
6.         log_not_found off;
   
7.         access_log off;
   
8.     }
   
9. 
   
10.     location = /robots.txt {
    
11.         allow all;
    
12.         log_not_found off;
    
13.         access_log off;
    
14.     }
    
15. 
    
16.     # Very rarely should these ever be accessed outside of your lan
    
17.     location ~* \.(txt|log)$ {
    
18.         allow 192.168.0.0/16;
    
19.         deny all;
    
20.     }
    
21. 
    
22.     location ~ \..*/.*\.php$ {
    
23.         return 403;
    
24.     }
    
25. 
    
26.     location ~ ^/sites/.*/private/ {
    
27.         return 403;
    
28.     }
    
29. 
    
30.     # Allow "Well-Known URIs" as per RFC 5785
    
31.     location ~* ^/.well-known/ {
    
32.         allow all;
    
33.     }
    
34. 
    
35.     # Block access to "hidden" files and directories whose names begin with a
    
36.     # period. This includes directories used by version control systems such
    
37.     # as Subversion or Git to store control files.
    
38. 
    
39. rewrite ^/core/authorize.php/core/authorize.php(.*)$ /core/authorize.php$1;
    
40.     location ~ (^|/)\. {
    
41.         return 403;
    
42.     }
    
43. 
    
44.     location / {
    
45.         # try_files $uri @rewrite; # For Drupal <= 6
    
46.         try_files $uri /index.php?$query_string; # For Drupal >= 7
    
47.     }
    
48. 
    
49.     location @rewrite {
    
50.         rewrite ^/(.*)$ /index.php?q=$1;
    
51.     }
    
52. 
    
53.     # Don't allow direct access to PHP files in the vendor directory.
    
54.     location ~ /vendor/.*\.php$ {
    
55.         deny all;
    
56.         return 404;
    
57.     }
    
58. 
    
59.     # In Drupal 8, we must also match new paths where the '.php' appears in
    
60.     # the middle, such as update.php/selection. The rule we use is strict,
    
61.     # and only allows this pattern with the update.php front controller.
    
62.     # This allows legacy path aliases in the form of
    
63.     # blog/index.php/legacy-path to continue to route to Drupal nodes. If
    
64.     # you do not have any paths like that, then you might prefer to use a
    
65.     # laxer rule, such as:
    
66.     #   location ~ \.php(/|$) {
    
67.     # The laxer rule will continue to work if Drupal uses this new URL
    
68.     # pattern with front controllers other than update.php in a future
    
69.     # release.
    
70.     location ~ '\.php$|^/update.php' {
    
71.         fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
    
72.         # Security note: If you're running a version of PHP older than the
    
73.         # latest 5.3, you should have "cgi.fix_pathinfo = 0;" in php.ini.
    
74.         # See http://serverfault.com/q/627903/94922 for details.
    
75.         include fastcgi_params;
    
76.         # Block httpoxy attacks. See https://httpoxy.org/.
    
77.         fastcgi_param HTTP_PROXY "";
    
78.         fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    
79.         fastcgi_param PATH_INFO $fastcgi_path_info;
    
80.         fastcgi_param QUERY_STRING $query_string;
    
81.         fastcgi_intercept_errors on;
    
82.         # PHP 5 socket location.
    
83.         fastcgi_pass unix:/tmp/php-cgi.sock;
    
84.         # PHP 7 socket location.
    
85.         #fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;
    
86.     }
    
87. 
    
88.     # Fighting with Styles? This little gem is amazing.
    
89.     # location ~ ^/sites/.*/files/imagecache/ { # For Drupal <= 6
    
90.     location ~ ^/sites/.*/files/styles/ { # For Drupal >= 7
    
91.         try_files $uri @rewrite;
    
92.     }
    
93. 
    
94.     # Handle private files through Drupal. Private file's path can come
    
95.     # with a language prefix.
    
96.     location ~ ^(/[a-z\-]+)?/system/files/ { # For Drupal >= 7
    
97.         try_files $uri /index.php?$query_string;
    
98.     }
    
99. 
    
100.     location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ {
     
101.         expires max;
     
102.         log_not_found off;
     
103.     }

复制代码

是不是在这里面需要对www做些什么？谢谢指点！

licess

直接访问验证码图片看看什么信息
网站都是同一个用户运行不可能是权限问题