ModSecurity WordPress and Akismet problem
I got a server 500 Error when accessing the akismet spam filter. Checking the logs and I could see the error was ModSecurity: Output filter: […]
ModSecurity
phpList exploit and ModSecurity Rule
In case you weren’t aware phpBB.com was breached using an exploit in phpList. Here is a quick and very dirty rule to protect your servers […]
Kaspersky WebSite Database Breached.
http://www.theregister.co.uk/2009/02/08/kaspersky_compromise_report/ I am only surmising from the limited information I can see here that ModSecurity would have protected them? Comments on this one welcome… Rule […]
Mod Security Application Specific Rules
Ofer Shezaf at xiom.com has created a list of Application Specific Rules for ModSecurity. He is actively looking for these rules so it should be […]
ModSecurity and PHPMyAdmin
Too many ModSecurity rules trip up PHPMyAdmin so I decided to find another way to protect it. I personally use the .htaccess password protection and […]
Mod Security and ACatalog Actinic
This is necessary to allow Actinic to work on a shared server. <LocationMatch “/cgi-bin/ca000001.pl”> SecRuleRemoveById 950910 </LocationMatch> <LocationMatch “/acatalog/”> SecRuleRemoveById 950910 </LocationMatch>
Mod Security and Mambo
I am managing a bunch of shared hosting servers and I still find clients of this company are installing older version of Mambo. This ModSecurity […]
Mod security and wordpress the final config
Just re-read the title and it sounds like science fiction B movie title.. Oh well. After running this for a while and having played with […]
Another mod_security exception for WordPress
Mod Security exceptions for WordPress, yet another addition.
Mod Security and WordPress Exceptions – The results
Fixing WordPress problems caused by Mod_security the result.