Search code examples
phpmod-securitymod-security2

Mod-security exception rule for url as parameter

I am new to mod security and was able to install it on my servers. However after its installation the website hosted is breaking up. After tracing the issue I was able to figure out that its not allowing me to pass url as a paramater in php code. eg: xyz.php?url=http://www.example.com/img/abc.jpg&param2=xyz Can there be any exceptions that can be added to modsecurity so that it allows to pass url as paramaters.

Thanking You,

Aazim

Solution

  • You need to find the mod_security rule Id from the logs then add the directive below to your virtualhost section:

    SecRuleRemoveById

    Example:

    SecRuleRemoveById 950005

    Are you able to view the apache and modsec logs?