mod_security / Atomicorp Basic WAF：POST中的URI

Question

I use mod_security with the WAF Basic Rules by Atomicorp.com on my Apache webserver. It prevents me from doing a POST of a form, containing an URI.

For example, if I POST https://example.com/demo via form, there a 403 Forbidden error occures.

This is my Apache log file:

"/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "207"] [id "340162"] [rev "294"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: URL detected as argument, possible RFI attempt detected"] [data "%TX:1,TX:1"] [severity "CRITICAL"] [hostname "*****.de"] [uri "/admin/"] [unique_id "*****"]

Can I just deactivate the rule with the ID 340162 or is there any other solution (maybe even without JavaScript)? I do not think that this rule is very important for me, because I am not a beginner programmer and does not have any eval(file_get_contents($_GET['url'])); or something other of this sort in my code ;-)

Answer 1

在Plesk 12中，您可以转到Tools & Settings > Web Application Firewall (ModSecurity)并在Security rule IDs旁边插入rule_id 340162（在Switch off security rules下面）。