Fixed permissions to vendor directory

web-apache-mysql/alpine/conf/etc/zabbix/apache.conf

@@ -42,4 +42,12 @@
             Deny from all
         </files>
     </Directory>
+
+    <Directory "/usr/share/zabbix/vendor">
+        Require all denied
+        <files *.php>
+            Order deny,allow
+            Deny from all
+        </files>
+    </Directory>
 </VirtualHost>

web-apache-mysql/alpine/conf/etc/zabbix/apache_ssl.conf

@@ -65,5 +65,13 @@ Listen 8443
                 Deny from all
             </files>
         </Directory>
+
+        <Directory "/usr/share/zabbix/vendor">
+            Require all denied
+            <files *.php>
+                Order deny,allow
+                Deny from all
+            </files>
+        </Directory>
     </VirtualHost>
 </IfModule>

web-apache-mysql/centos/conf/etc/zabbix/apache.conf

@@ -46,4 +46,12 @@
             Deny from all
         </files>
     </Directory>
+
+    <Directory "/usr/share/zabbix/vendor">
+        Require all denied
+        <files *.php>
+            Order deny,allow
+            Deny from all
+        </files>
+    </Directory>
 </VirtualHost>

web-apache-mysql/centos/conf/etc/zabbix/apache_ssl.conf

@@ -68,4 +68,12 @@ Listen 8443
                 Deny from all
             </files>
         </Directory>
+
+        <Directory "/usr/share/zabbix/vendor">
+            Require all denied
+            <files *.php>
+                Order deny,allow
+                Deny from all
+            </files>
+        </Directory>
     </VirtualHost>

web-apache-mysql/ubuntu/conf/etc/zabbix/apache.conf

@@ -42,4 +42,12 @@
             Deny from all
         </files>
     </Directory>
+
+    <Directory "/usr/share/zabbix/vendor">
+        Require all denied
+        <files *.php>
+            Order deny,allow
+            Deny from all
+        </files>
+    </Directory>
 </VirtualHost>

web-apache-mysql/ubuntu/conf/etc/zabbix/apache_ssl.conf

@@ -64,5 +64,13 @@ LoadModule headers_module /usr/lib/apache2/modules/mod_headers.so
                 Deny from all
             </files>
         </Directory>
+
+        <Directory "/usr/share/zabbix/vendor">
+            Require all denied
+            <files *.php>
+                Order deny,allow
+                Deny from all
+            </files>
+        </Directory>
     </VirtualHost>
 </IfModule>

web-apache-pgsql/alpine/conf/etc/zabbix/apache.conf

@@ -42,4 +42,12 @@
             Deny from all
         </files>
     </Directory>
+
+    <Directory "/usr/share/zabbix/vendor">
+        Require all denied
+        <files *.php>
+            Order deny,allow
+            Deny from all
+        </files>
+    </Directory>
 </VirtualHost>

web-apache-pgsql/alpine/conf/etc/zabbix/apache_ssl.conf

@@ -65,5 +65,13 @@ Listen 8443
                 Deny from all
             </files>
         </Directory>
+
+        <Directory "/usr/share/zabbix/vendor">
+            Require all denied
+            <files *.php>
+                Order deny,allow
+                Deny from all
+            </files>
+        </Directory>
     </VirtualHost>
 </IfModule>

web-apache-pgsql/centos/conf/etc/zabbix/apache.conf

@@ -46,4 +46,12 @@
             Deny from all
         </files>
     </Directory>
+
+    <Directory "/usr/share/zabbix/vendor">
+        Require all denied
+        <files *.php>
+            Order deny,allow
+            Deny from all
+        </files>
+    </Directory>
 </VirtualHost>

web-apache-pgsql/centos/conf/etc/zabbix/apache_ssl.conf

@@ -68,4 +68,12 @@ Listen 8443
                 Deny from all
             </files>
         </Directory>
+
+        <Directory "/usr/share/zabbix/vendor">
+            Require all denied
+            <files *.php>
+                Order deny,allow
+                Deny from all
+            </files>
+        </Directory>
     </VirtualHost>

web-apache-pgsql/ubuntu/conf/etc/zabbix/apache.conf

@@ -42,4 +42,12 @@
             Deny from all
         </files>
     </Directory>
+
+    <Directory "/usr/share/zabbix/vendor">
+        Require all denied
+        <files *.php>
+            Order deny,allow
+            Deny from all
+        </files>
+    </Directory>
 </VirtualHost>

web-apache-pgsql/ubuntu/conf/etc/zabbix/apache_ssl.conf

@@ -64,5 +64,13 @@ LoadModule headers_module /usr/lib/apache2/modules/mod_headers.so
                 Deny from all
             </files>
         </Directory>
+
+        <Directory "/usr/share/zabbix/vendor">
+            Require all denied
+            <files *.php>
+                Order deny,allow
+                Deny from all
+            </files>
+        </Directory>
     </VirtualHost>
 </IfModule>

web-nginx-mysql/alpine/conf/etc/zabbix/nginx.conf

@@ -50,6 +50,11 @@ server {
         try_files $uri $uri/ /index.php?$args;
     }
 
+    location ~ /(api\/|conf[^\.]|include|locale|vendor) {
+        deny  all;
+        return  404;
+    }
+
     location ~ .php$ {
         fastcgi_pass   unix:/tmp/php-fpm.sock;
         fastcgi_index  index.php;

web-nginx-mysql/alpine/conf/etc/zabbix/nginx_ssl.conf

@@ -74,6 +74,11 @@ server {
         try_files $uri $uri/ /index.php?$args;
     }
 
+    location ~ /(api\/|conf[^\.]|include|locale|vendor) {
+        deny  all;
+        return  404;
+    }
+
     location ~ .php$ {
         fastcgi_pass   unix:/tmp/php-fpm.sock;
         fastcgi_index  index.php;

web-nginx-mysql/centos/conf/etc/zabbix/nginx.conf

@@ -50,6 +50,11 @@ server {
         try_files $uri $uri/ /index.php?$args;
     }
 
+    location ~ /(api\/|conf[^\.]|include|locale|vendor) {
+        deny  all;
+        return  404;
+    }
+
     location ~ .php$ {
         fastcgi_pass   unix:/tmp/php-fpm.sock;
         fastcgi_index  index.php;

web-nginx-mysql/centos/conf/etc/zabbix/nginx_ssl.conf

@@ -74,6 +74,11 @@ server {
         try_files $uri $uri/ /index.php?$args;
     }
 
+    location ~ /(api\/|conf[^\.]|include|locale|vendor) {
+        deny  all;
+        return  404;
+    }
+
     location ~ .php$ {
         fastcgi_pass   unix:/tmp/php-fpm.sock;
         fastcgi_index  index.php;

web-nginx-mysql/rhel/conf/etc/zabbix/nginx.conf

@@ -50,6 +50,11 @@ server {
         try_files $uri $uri/ /index.php?$args;
     }
 
+    location ~ /(api\/|conf[^\.]|include|locale|vendor) {
+        deny  all;
+        return  404;
+    }
+
     location ~ .php$ {
         fastcgi_pass   unix:/tmp/php-fpm.sock;
         fastcgi_index  index.php;

web-nginx-mysql/rhel/conf/etc/zabbix/nginx_ssl.conf

@@ -74,6 +74,11 @@ server {
         try_files $uri $uri/ /index.php?$args;
     }
 
+    location ~ /(api\/|conf[^\.]|include|locale|vendor) {
+        deny  all;
+        return  404;
+    }
+
     location ~ .php$ {
         fastcgi_pass   unix:/tmp/php-fpm.sock;
         fastcgi_index  index.php;

web-nginx-mysql/ubuntu/conf/etc/zabbix/nginx.conf

@@ -50,6 +50,11 @@ server {
         try_files $uri $uri/ /index.php?$args;
     }
 
+    location ~ /(api\/|conf[^\.]|include|locale|vendor) {
+        deny  all;
+        return  404;
+    }
+
     location ~ .php$ {
         fastcgi_pass   unix:/tmp/php-fpm.sock;
         fastcgi_index  index.php;

web-nginx-mysql/ubuntu/conf/etc/zabbix/nginx_ssl.conf

@@ -74,6 +74,11 @@ server {
         try_files $uri $uri/ /index.php?$args;
     }
 
+    location ~ /(api\/|conf[^\.]|include|locale|vendor) {
+        deny  all;
+        return  404;
+    }
+
     location ~ .php$ {
         fastcgi_pass   unix:/tmp/php-fpm.sock;
         fastcgi_index  index.php;

web-nginx-pgsql/alpine/conf/etc/zabbix/nginx.conf

@@ -50,6 +50,11 @@ server {
         try_files $uri $uri/ /index.php?$args;
     }
 
+    location ~ /(api\/|conf[^\.]|include|locale|vendor) {
+        deny  all;
+        return  404;
+    }
+
     location ~ .php$ {
         fastcgi_pass   unix:/tmp/php-fpm.sock;
         fastcgi_index  index.php;

web-nginx-pgsql/alpine/conf/etc/zabbix/nginx_ssl.conf

@@ -74,6 +74,11 @@ server {
         try_files $uri $uri/ /index.php?$args;
     }
 
+    location ~ /(api\/|conf[^\.]|include|locale|vendor) {
+        deny  all;
+        return  404;
+    }
+
     location ~ .php$ {
         fastcgi_pass   unix:/tmp/php-fpm.sock;
         fastcgi_index  index.php;

web-nginx-pgsql/centos/conf/etc/zabbix/nginx.conf

@@ -50,6 +50,11 @@ server {
         try_files $uri $uri/ /index.php?$args;
     }
 
+    location ~ /(api\/|conf[^\.]|include|locale|vendor) {
+        deny  all;
+        return  404;
+    }
+
     location ~ .php$ {
         fastcgi_pass   unix:/tmp/php-fpm.sock;
         fastcgi_index  index.php;

web-nginx-pgsql/centos/conf/etc/zabbix/nginx_ssl.conf

@@ -74,6 +74,11 @@ server {
         try_files $uri $uri/ /index.php?$args;
     }
 
+    location ~ /(api\/|conf[^\.]|include|locale|vendor) {
+        deny  all;
+        return  404;
+    }
+
     location ~ .php$ {
         fastcgi_pass   unix:/tmp/php-fpm.sock;
         fastcgi_index  index.php;

web-nginx-pgsql/ubuntu/conf/etc/zabbix/nginx.conf

@@ -50,6 +50,11 @@ server {
         try_files $uri $uri/ /index.php?$args;
     }
 
+    location ~ /(api\/|conf[^\.]|include|locale|vendor) {
+        deny  all;
+        return  404;
+    }
+
     location ~ .php$ {
         fastcgi_pass   unix:/tmp/php-fpm.sock;
         fastcgi_index  index.php;

web-nginx-pgsql/ubuntu/conf/etc/zabbix/nginx_ssl.conf

@@ -74,6 +74,11 @@ server {
         try_files $uri $uri/ /index.php?$args;
     }
 
+    location ~ /(api\/|conf[^\.]|include|locale|vendor) {
+        deny  all;
+        return  404;
+    }
+
     location ~ .php$ {
         fastcgi_pass   unix:/tmp/php-fpm.sock;
         fastcgi_index  index.php;

zabbix-appliance/rhel/conf/etc/zabbix/nginx.conf

@@ -50,6 +50,11 @@ server {
         try_files $uri $uri/ /index.php?$args;
     }
 
+    location ~ /(api\/|conf[^\.]|include|locale|vendor) {
+        deny  all;
+        return  404;
+    }
+
     location ~ .php$ {
         fastcgi_pass   unix:/tmp/php-fpm.sock;
         fastcgi_index  index.php;

zabbix-appliance/rhel/conf/etc/zabbix/nginx_ssl.conf

@@ -74,6 +74,11 @@ server {
         try_files $uri $uri/ /index.php?$args;
     }
 
+    location ~ /(api\/|conf[^\.]|include|locale|vendor) {
+        deny  all;
+        return  404;
+    }
+
     location ~ .php$ {
         fastcgi_pass   unix:/tmp/php-fpm.sock;
         fastcgi_index  index.php;