Monday, March 10, 2008

How to disable mod_security for a single account

Introduction:
Having Mod_security enabled for servers prevents commonly used methods to hack websites. Common examples are: outdated software, unpatched and so on.
Symptoms:
If you are receiving access denied message with error code 403 when you check the error logs for any account, it means mod_security rules are triggered.
Minor issues:
It’s applied for the entire server, so all websites are affected, even if there’s a secure software which doesn’t require security restrictions.
Fix :
You can disable the mod_security for that account by adding a simple code in its .htaccess

SecFilterEngine Off
SecFilterScanPOST Off


Solution by
http://howto4life.com/disable-mod_security-for-an-account/12/

No comments: