Image not display after using nginx

Question

recently i change my web server from apache to nginx, my site using using wordpress and use google drive wp media plugin to store image in google drive , after i change to nginx all image suddenly post images are not Display honestly i dont know where to begin but there is .htaccess and php file on /wp-content/uploads/gdwpm_images here is the .htaccess file

RewriteEngine on RewriteBase / RewriteCond %{QUERY_STRING} !^imgid= [NC] RewriteRule ^(.*)$ wp-content/uploads/gdwpm_images/index.php?imgid=$1 [L,NC,QSA] 

and here the index.php file

<?php if (isset($_GET['imgid'])){ $gdwpm_ekst_gbr = explode('.', $_GET['imgid']); if($gdwpm_ekst_gbr[1] == 'png' || $gdwpm_ekst_gbr[1] == 'gif' || $gdwpm_ekst_gbr[1] == 'bmp'){ header("Content-Type: image/" . $gdwpm_ekst_gbr[1]); }else{ header("Content-Type: image/jpg"); } $gdurl = "https://docs.google.com/uc?id=" . $gdwpm_ekst_gbr[0] . "&export=view"; @readfile($gdurl); } ?> 

i tried this:

# nginx configuration location / { if ($query_string !~ "^imgid="){ rewrite ^(.*)$ /wp-content/uploads/gdwpm_images/index.php?imgid=$1 break; } } 

and this

location ~ /wp-content/uploads/gdwpm_images/index.php { if ($args ~* "^imgid=") { set $mid $1; set $args ''; rewrite ^.*$ /wp-content/uploads/gdwpm_images/index.php?imgid=$1 permanent; } } 

nothing works, all image like

 http://example.com/wp-content/uploads/gdwpm_images/0B73ed93lY08zZkXsDDkY5VFNSZjg.jpg 

return in 404, how is the correct rewrite rule for this thanks

edit : Server Ubuntu 14.04.4 LTS (GNU/Linux 3.13.0-79-generic x86_64) nginx version: nginx/1.4.6 (Ubuntu) PHP 5.5.9-1ubuntu4.14 (fpm-fcgi) cURL support enabled cURL Information 7.35.0

#AUTOMATICALLY GENERATED - DO NO EDIT! server { listen *:80; server_name example.com; access_log /var/log/nginx/examplecom.access.log; error_log /var/log/nginx/example.com.error.log; root /srv/examplecom; index index.html index.htm index.php; # This order might seem weird - this is attempted to match last if rules below fail. location / { try_files $uri $uri/ /index.php?$args; } location /wp-content/uploads/gdwpm_images { if ($query_string !~ "^imgid=") { rewrite ^/(.*)$ /wp-content/uploads/gdwpm_images/index.php?imgid=$1 last; } } # Add trailing slash to */wp-admin requests. rewrite /wp-admin$ $scheme://$host$uri/ permanent; # Directives to send expires headers and turn off 404 error logging. location ~* ^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$ { access_log off; log_not_found off; expires max; } location = /favicon.ico { log_not_found off; access_log off; } location = /robots.txt { allow all; log_not_found off; access_log off; } # Deny all attempts to access hidden files such as .htaccess, .htpasswd, .DS_Store (Mac). # Keep logging the requests to parse later (or to pass to firewall utilities such as fail2ban) location ~ /\. { deny all; } # Deny access to any files with a .php extension in the uploads directory # Works in sub-directory installs and also in multisite network # Keep logging the requests to parse later (or to pass to firewall utilities such as fail2ban) location ~* /(?:uploads|files)/.*\.php$ { deny all; } location ~ [^/]\.php(/|$) { try_files $uri =404; fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_index index.php; include fcgi.conf; fastcgi_pass unix:/var/run/ajenti-v-php-fcgi-examplecom-php-fcgi-0.sock; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; } } 

im using Ajenti web panel for my nginx server

Answer 1

The index.php file should be processed by a different location block, so (hopefully) all you need to do is rewrite the non-php files at that location using:

location ^~ /wp-content/uploads/gdwpm_images { rewrite ^/(.*)$ /wp-content/uploads/gdwpm_images/index.php?imgid=$1 last; } 

However, the main problem is that .php files below /uploads/ are explicitly forbidden by the location ~* /(?:uploads|files)/.*\.php$ rule.

Rather than open that rule and risk upload exploits - it may be better to move and rename index.php to somewhere outside of the protected area.

EDIT2: Added ^~ to prevent the location being overridden by the location ~* ^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$ block.