Mod-security exception rule for url as parameter [closed]

问题

Closed. This question is off-topic. It is not currently accepting answers.

---

Want to improve this question? Update the question so it's on-topic for Stack Overflow.

Closed 5 years ago.

I am new to mod security and was able to install it on my servers. However after its installation the website hosted is breaking up. After tracing the issue I was able to figure out that its not allowing me to pass url as a paramater in php code. eg: xyz.php?url=http://www.example.com/img/abc.jpg&param2=xyz Can there be any exceptions that can be added to modsecurity so that it allows to pass url as paramaters.

Thanking You,

Aazim

回答1:

You need to find the mod_security rule Id from the logs then add the directive below to your virtualhost section:

SecRuleRemoveById

Example:

SecRuleRemoveById 950005

Are you able to view the apache and modsec logs?

回答2:

Adding a rule to ignore that particular arg to your vhost should do it

SecRule !ARGS:url

来源：https://stackoverflow.com/questions/14215419/mod-security-exception-rule-for-url-as-parameter