Mod Security: The receiving end of your own joke.

Started by Gregg, November 18, 2008, 10:38:54 AM

Previous topic - Next topic

Gregg

I've gone through my mod security core rules and changed most deny status codes to some of the undefined numbers. I have special error documents configured for them which Apache happily serves.

I was updating some records on a mysql database and was having no problems till this one record. All I'd get when I tried to edit it was a blank frame in phpMyAdmin. After a couple tries I finally looked at the frame source for clues, that's when I saw it, just one thing showing;

<PUTZ>

I had to laugh!

mario


Gregg

#2
Let's have a look;

modsecurity_crs_40_generic_attacks.conf"] [line "75"]

remember, as I said, instead of the standard 403 I've change it to 420
ErrorDoccument 420 /error/putz.html

I will say I have had many problems with Mod Security after 2.5.4, 2.5.5 or 6 I had to not use core rules period. I'm seriously thinking of moving back to 2.5.4

Aren't you up rather late? Guss not, only 11pm there

mario

You are right, was only 10:38pm when I replied. So I guess my offset to you is 9 hrs?

Gregg