Category: Servers of Web: Apache2

ust to update this question for mod_security 2.7.0+ – they turned off the ability to mitigate modsec via htaccess unless you compile it with the –enable-htaccess-config flag. Most hosts do not use this compiler option since it allows too lax security. Instead, vhosts in httpd.conf are your go-to option for controlling modsec.

“mod_security2: In .htaccess file?”Continue reading

List of examples:
“mod_security2: grep log in cmdline”Continue reading

ModSecurity supplies an array of request filtering and other security features to the Apache HTTP Server, IIS and NGINX. ModSecurity is a web application layer firewall. ModSecurity is free software released under the Apache license 2.0.

“ModSecurity2 to Apache HTTP Server (CentOS)”Continue reading