Solved

mod_security and secfilter

Posted on 2007-03-26
2
279 Views
Last Modified: 2009-07-29
I just install mod_security to prevent user from typing shell command in phpshell script.
I use :

Secfilter ls
Secfiler cat
Secfilter rm

then problem come when some use wanna access their php script named "catalogue.php" and using view.php?cat=1

also user of wordpress who wanna access options-permalink.php ( rm in permalink ) in the file name.

any clue or hint to solve this problem.

thanks in advance
0
Comment
Question by:hendri2
  • 2
2 Comments
 
LVL 19

Accepted Solution

by:
BrianGEFF719 earned 500 total points
ID: 18798057
You might try something like:

SecFilterEngine On
SecFilterScanPOST On
SecFilterSelective "SCRIPT_FILENAME" "options-permalink\.php " "allow,log,status:412"
SecFilterSelective "QUERY_STRING" "cat" "allow,log,status:412"
SecFilterSelective "SCRIPT_FILENAME" "catalogue\.php" "allow,log,status:412"
0
 
LVL 19

Expert Comment

by:BrianGEFF719
ID: 18798072
btw, that should go in your .htaccess file.
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
php mail headers 2 12
WooCommerce Sort by Date 4 9
Word files to Wordpress Posts 2 26
Strip leading 0 from a var 3 13
Hi, in this article I'm going to teach you how to run your own site, and how to let people in (without IP). I'll talk about and explain each step... :) By the way, everything in this Tutorial is completely free and legal. This article is for …
I annotated my article on ransomware somewhat extensively, but I keep adding new references and wanted to put a link to the reference library.  Despite all the reference tools I have on hand, it was not easy to find a way to do this easily. I finall…
The purpose of this video is to demonstrate how to manually back up a WordPress Database. This will be demonstrated using a Windows 8 PC. The Host used will be IPage.com Log into your Hosting account. IPage will be used for demonstration : Locat…
The purpose of this video is to demonstrate how to Test the speed of a WordPress Website. Site Speed is an important metric of a site’s health. Slow site speed can result in viewers leaving your site quickly and not seeing your content. This…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now