The reason behind this findings is simple.One of my website which should be up and running everyday without fail was pulling my legs for the past 7 days because it always goes down at one time or another after posting or deleting some topics or something related to that was done.I raised a ticket on my web hosting provider and they told some firewall is blocking my IP.Then i realized that their is some culprit in between my webserver and the enduser.It is the apache module mod_security which is very powerful and we can install it with the webservers of apache easily.So the next step was that i want to disable this guy for my users otherwise they will experience NetWork Time Out or 500ISE[Internal Server Error] or even 406 HTTP error.
This is a very nice module that acts as an Apache firewall – it blocks a lot of the usual routes that people use to hack websites. In particular it scans POST requests (sent when you ‘save’ something on a website’), and displays a 406 error for anything controversial.
The solution was very simple. The following lines were added to the .htaccess file to disable mod_security:
<IfModule mod_security.c> SecFilterEngine Off SecFilterScanPOST Off </IfModule>
Naturally you loose any benefits that mod_security might bring, but that’s better than a non-functioning website, and you can always ask for the security configuration to be toned down to a more acceptable level.
Disable mod_security in .htaccess file
- If you do not have one yet, an
.htaccessfile in the folder of your web application - To disable
mod_securityCOMPLETELY, add the following line to the .htaccess file: -
<IfModule mod_security.c>
-
SecFilterEngine OffOR, to disable HTTP POST scanning only, use the following instead:
SecFilterScanPOST Off -
</IfModule>
- Save the file and test your web application to check whether disabling
mod_securityhas solved your problem.
After a day long googling i found out the culprit that was not allowing me to access my website.I think i have fixed my issue and i think u also have found out the real culprit behind your access issue.
Incoming search terms:
- mod_security tutorial (4)
- mod_security xampp (4)
- mod_security benefits (4)
- xampp modsecurity (4)
- apache firewall module (3)
- xampp mod_security (3)
- status h in apache (3)
- benefits of mod_security (3)
- apache module firewall (2)
- no contenttypes found on line 427 in (2)
- mod_security symfony (2)
- mod_security for xampp (2)
- install mod_security xampp linux (2)
- mod_security beifits (2)
- apache permission denied: ah00072: (2)
- apache Permission denied: AH00072 (2)
- apache firewall (2)
- ah00072 apache (2)
- your firewall blocks appache (1)
- mod_security en xamp (1)
- mod_security and xampp linux (1)
- xampp mod-security (1)
- mod_security lampp (1)
- mod_security module apache (1)
- mod_security on lampp (1)
- xampp linux install mod security (1)
- xamp1 7 (1)
- some firewalls are blocking my website (1)
- problem posting % in textarea solved by commenting mod_security (1)
- web hosts mod_security is blocking ip addresses (1)
- please wait without javascript mod_security (1)
- web page refresh one time code (1)
- mod_security2 windows xp xampp (1)
- why my ip is being blocked by your firewall mod_security (1)
- mod_security with xampp linux (1)
- mod_sec xampp (1)
- modsecurity xampp (1)
- benfits of mod_security#hl=en (1)
- appache mod for firewall (1)
- apache proxystatus on (1)
You will also be interested in ,
- Adding apache handlers in cpanel
- mod_proxy_balancer apache load balancing
- Apache AddHandler application/x-httpd-php not working?
- How to run or Configure Apache to use PHP as CGI
- Fix 500 Internal Server Error In WordPress
- Custom Error Pages Using .htaccess
- How to run jsp in xampp?
- ScriptAlias and Alias in httpd.conf at a glance
- mod_proxy_balancer and installation
- Speed up wordpress using .htaccess part 2
