Author Topic: mod_security  (Read 4999 times)

Offline silentfreak

  • Junior Phone Loser
  • **
  • Posts: 28
  • 1337 13V3L: +1/-7
mod_security
« on: August 25, 2006, 05:17:04 PM »
I am experiencing problems because of this.  Problems include weird "403" or access denied errors, login problems, and similar.  My host has blocked and filtered certain keywords.  When I e-mailed them they said it was their mod_security that was filtering certain requests.  Is there anyway around this without changing hosts?

Offline gabigabihey

  • Newb
  • *
  • Posts: 13
  • 1337 13V3L: +2/-7
Re: mod_security
« Reply #1 on: August 25, 2006, 05:24:59 PM »
odviously i have haxored you.
[

Offline gangals

  • Merp?
  • PLA Nation Citizen
  • *
  • Posts: 1031
  • 1337 13V3L: +68/-31
  • ummm cacti
    • http://img116.imageshack.us/img116/1879/bagmanonfire4pb.jpg
Re: mod_security
« Reply #2 on: August 25, 2006, 05:25:42 PM »
....proxy ???

Offline tk

  • Junior Phone Loser
  • **
  • Posts: 40
  • 1337 13V3L: +2/-2
Re: mod_security
« Reply #3 on: August 25, 2006, 05:26:47 PM »
Try adding this into your root .htaccess file:
Code: [Select]
<IfModule mod_security.c>
    SecFilterEngine Off
    SecFilterCheckURLEncoding Off
    SecFilterScanPOST Off
</IfModule>
This is better than rejuvenation!

Offline silentfreak

  • Junior Phone Loser
  • **
  • Posts: 28
  • 1337 13V3L: +1/-7
Re: mod_security
« Reply #4 on: August 25, 2006, 05:57:29 PM »
Try adding this into your root .htaccess file:
Code: [Select]
<IfModule mod_security.c>
    SecFilterEngine Off
    SecFilterCheckURLEncoding Off
    SecFilterScanPOST Off
</IfModule>

That worked perfectly.  Thank you.

Now I have another dilema.  I need to make my attachments folder chmod 777.  Isn't that a security risk?

Offline tk

  • Junior Phone Loser
  • **
  • Posts: 40
  • 1337 13V3L: +2/-2
Re: mod_security
« Reply #5 on: August 26, 2006, 10:45:22 PM »
Now I have another dilema.  I need to make my attachments folder chmod 777.  Isn't that a security risk?
Maybe, maybe not. If you're on a shared system, a user may be able to navigate into that directory, but your host probably set the permissions so only you can access your home directory.
This is better than rejuvenation!

Offline ryanfido

  • I smoke rocks.
  • Lieutenant Cactus
  • *****
  • Posts: 261
  • 1337 13V3L: +16/-60
  • You think you know? You have no brain.
Re: mod_security
« Reply #6 on: August 29, 2006, 06:53:16 PM »
odviously i have haxored you.


you cant even spell 403, noob.

.

  • Guest
Re: mod_security
« Reply #7 on: October 12, 2006, 08:06:17 AM »
 I've got the same issue and I need to ask for a password renew every time I log in; RBCP are you having authentication problems in your server or is something that happens only to me?

Offline rbcp

  • Head Custodian
  • Administrator
  • Ninja Phone Loser
  • *****
  • Posts: 5259
  • 1337 13V3L: +454/-81
  • I'm not stupid! I'm not stupid! Hematology!
    • Homepage
Re: mod_security
« Reply #8 on: October 12, 2006, 08:49:18 AM »
I've got the same issue and I need to ask for a password renew every time I log in; RBCP are you having authentication problems in your server or is something that happens only to me?

Not that I know of.  I've never had problems with it.  I'm never been asked to re-login.

Offline silentneep

  • If elected, I promise a ME TOO post once a year to keep my account active and a chicken in every pot brownie.
  • PLA Army
  • *****
  • Posts: 550
  • 1337 13V3L: +56/-36
  • I have no idea where I am.
Re: mod_security
« Reply #9 on: October 12, 2006, 08:52:50 AM »
I got asked once, like a week and a half ago.  My first thought was, "Did I do something while I was drunk that was z09-caliber?"
May the forces of evil become confused on the way to your house.