Title: nginx security warning
Last modified: October 23, 2019

---

# nginx security warning

 *  Resolved [izuio](https://wordpress.org/support/users/izuio/)
 * (@izuio)
 * [6 years, 7 months ago](https://wordpress.org/support/topic/nginx-security-warning/)
 * plugin looks nice so far thanks:
 * I am getting this message Smart Cookie Kit protects the log directory with a “.
   htaccess” file but NGINX does not support this kind of approach.
    In order to
   protect the log directory, your server administrator should add some rules in
   your vhost configuration file.
 * surprisingly I was unable to find anything in the FAQ
 * # Example rule to deny access to the cookie preferences log directory
 *     ```
       location ~ /wp-content/cookie-preferences-log/(.*) {
         deny all;
         return 403;
       }
       ```
   
 * Before I go to server admin and ask – is there a reference somewhere which explains
   why this is a good idea ?
 * thanks

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Plugin Author [Nicola Modugno](https://wordpress.org/support/users/shark986/)
 * (@shark986)
 * [6 years, 7 months ago](https://wordpress.org/support/topic/nginx-security-warning/#post-12102534)
 * Hello [@izuio](https://wordpress.org/support/users/izuio/),
 * as a site admin, you can not manage NGINX rules; if you are managing your hosting
   space with NGINX on your own (so you are the server admin), you should know how
   to apply the example rule I have suggested or create a better version for your
   server configuration.
 * I think that there is not much to say. What kind of details do you expect to 
   find in the FAQ, other than those you have reported in the post?
 * Let me know, I will be glad to add useful details.
 * What are you referring to with “… which explains why this is a good idea?”.
 * Nicola.
 *  Plugin Author [Nicola Modugno](https://wordpress.org/support/users/shark986/)
 * (@shark986)
 * [6 years, 5 months ago](https://wordpress.org/support/topic/nginx-security-warning/#post-12273725)
 * [@izuio](https://wordpress.org/support/users/izuio/) i was checking opened threads…
 * > Before I go to server admin and ask – is there a reference somewhere which 
   > explains why this is a good idea ?
 * If you refer to the reason for which you should contact the server admin, well,
   let me say that it is not a suggestion. That is really really important!!
    The
   reason is simple: in the “cookie-preferences-log” directory there are data that
   the GDPR calls “sensitive data”, so you MUST protect that directory from unauthorized
   access. To protect that directory you have to call the server admin because the
   plugin can not automatically protect it (as it does when the server runs Apache
   web server).
 * Hope that this answer clarifies a bit.
 * Nicola

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘nginx security warning’ is closed to new replies.

 * ![](https://ps.w.org/smart-cookie-kit/assets/icon-128x128.png?rev=1306201)
 * [Smart Cookie Kit](https://wordpress.org/plugins/smart-cookie-kit/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/smart-cookie-kit/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/smart-cookie-kit/)
 * [Active Topics](https://wordpress.org/support/plugin/smart-cookie-kit/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/smart-cookie-kit/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/smart-cookie-kit/reviews/)

## Tags

 * [nginx](https://wordpress.org/support/topic-tag/nginx/)

 * 2 replies
 * 1 participant
 * Last reply from: [Nicola Modugno](https://wordpress.org/support/users/shark986/)
 * Last activity: [6 years, 5 months ago](https://wordpress.org/support/topic/nginx-security-warning/#post-12273725)
 * Status: resolved