Question

我在symfony2.8上有一个项目，我使用Parrot OS（基于Debian），已经安装了PHP7.1和MariaDB，但是当我尝试访问网站项目时，却得到了：

403禁止

有一些日志：

/var/log/nginx/error.log

2018/08/18 19:57:29 [error] 2520#2520: *15 directory index of "/var/www/html/xxxxxx/" is forbidden, client: ::1, server: _, request: "GET /airnjobs/ HTTP/1.1", host: "localhost"

/var/log/nginx/access.log

::1 - - [18/Aug/2018:19:57:29 +0200] "GET /xxxxx/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"

能帮我吗：/我被卡住了！

更新1：

仍然无法访问，我查封目录和文件以及chmod，但没有结果。

Answer 1

这看起来像是nginx配置问题，而不是权限问题。

如果/xxxxx是项目目录，则项目的Web根目录应为/xxxxx/web。
您的日志显示您正在尝试列出项目目录的内容，当您只应访问/xxxxx/web/app_dev.php，/xxxxx/web/app.php或/xxxxx/web/config.php时，
因此此403错误是预期的行为。

尝试访问开发环境时，您的URL应该类似于
http://localhost/xxxxx/web/app_dev.php，
或http://xxxxx.local/app_dev.php（如果您已正确配置了Web主机）。

symfony文档中有一个2.8的nginx配置示例：
https://symfony.com/doc/2.8/setup/web_server_configuration.html#nginx

我做了一些修改以适合您的情况：

server {
    server_name xxxxx.local;
    root /var/www/html/xxxxx/web;

    location / {
        # try to serve file directly, fallback to app.php
        try_files $uri /app.php$is_args$args;
    }
    # DEV
    # This rule should only be placed on your development environment
    # In production, don't include this and don't deploy app_dev.php or config.php
    location ~ ^/(app_dev|config)\.php(/|$) {
        fastcgi_pass unix:/var/run/php/php7.1-fpm.sock;
        fastcgi_split_path_info ^(.+\.php)(/.*)$;
        include fastcgi_params;
        # When you are using symlinks to link the document root to the
        # current version of your application, you should pass the real
        # application path instead of the path to the symlink to PHP
        # FPM.
        # Otherwise, PHP's OPcache may not properly detect changes to
        # your PHP files (see https://github.com/zendtech/ZendOptimizerPlus/issues/126
        # for more information).
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
        fastcgi_param DOCUMENT_ROOT $realpath_root;
    }
    # PROD
    location ~ ^/app\.php(/|$) {
        fastcgi_pass unix:/var/run/php/php7.1-fpm.sock;
        fastcgi_split_path_info ^(.+\.php)(/.*)$;
        include fastcgi_params;
        # When you are using symlinks to link the document root to the
        # current version of your application, you should pass the real
        # application path instead of the path to the symlink to PHP
        # FPM.
        # Otherwise, PHP's OPcache may not properly detect changes to
        # your PHP files (see https://github.com/zendtech/ZendOptimizerPlus/issues/126
        # for more information).
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
        fastcgi_param DOCUMENT_ROOT $realpath_root;
        # Prevents URIs that include the front controller. This will 404:
        # http://domain.tld/app.php/some-path
        # Remove the internal directive to allow URIs like this
        internal;
    }

    # return 404 for all other php files not matching the front controller
    # this prevents access to other php files you don't want to be accessible.
    location ~ \.php$ {
        return 404;
    }

    error_log /var/log/nginx/xxxxx_error.log;
    access_log /var/log/nginx/xxxxx_access.log;
}

这进入您的nginx配置文件，例如：
/etc/nginx/conf.d/xxxxx.conf

然后，您需要将主机名xxxxx.local添加到/etc/hosts文件中：

127.0.0.1        xxxxx.local

403禁止访问Symfony2项目

1 个答案: