How can I turn off mod_security for my site?

Question:

One of my applications is triggering the mod_security rules. How can I turn off mod_security for my site?

Answer:

Add this line to your .htaccess file:

SecFilterInheritance Off

If there is only a certain portion of your site with errors due to mod_security, we recommend you put the disable command only in an .htaccess file in the directory for the part of your site with the errors. This will allow you to still have mod_security protection on the rest of your site.

All mod_security errors will appear as error status 500. Not all 500 errors are due to mod_security but if you have odd ones that you can not find the source of they may be from mod_security.

mod_security watches all incoming requests for certain known attack signatures and stops them. It is very effective against stopping common hacking attempts on your site.

See mod_security.org for more information.

Leave a Reply

Your email address will not be published. Required fields are marked *