New vulnerability in 1.6.9 allows malware insertion?

[frostschutz]

This user has been denied support.

Taken from the Wordpress recommended config which I see mentioned as pretty good a lot.

In the context as shown on http://codex.wordpress.org/Nginx the example you posted is incorrect. ("\.php$" and "^(.+\.php)(/.+)$" don't go well together). That's unfortunately how it is with most nginx guides, they're full of errors.

[Euan T]

Oh, I've heard it recommended as a great guide many times too. Never knew that, thanks.