Text only | Text with Images

Simple Machines Community Forum

SMF Support => SMF 2.0.x Support => Topic started by: Nodaz on December 26, 2020, 05:13:05 PM

Title: why mod security off in htaccess
Post by: Nodaz on December 26, 2020, 05:13:05 PM
Just checking htaccess on several SMF sites, one had this entry:
Code Select
<IfModule mod_security.c>
SecFilterEngine Off
SecFilterScanPOST Off
</IfModule>

Any particular reason to have it or not?  I dont recall adding it, perhap a mod?
Title: Re: why mod security off in htaccess
Post by: vbgamer45 on December 26, 2020, 05:18:15 PM
It causes issues at time with forums mods.

Generally if you have ;id= in the url request will fail.
Also common words like cc: to: in forum posts may cause an error.
Their are various rules in mod_security that cause trouble at times.
Title: Re: why mod security off in htaccess
Post by: Sir Osis of Liver on December 26, 2020, 05:20:10 PM
mod_security has caused problems on many forums, recommendation is to disable it.  Usually can be done in cpanel.  AFAIK there isn't a mod that disables it via .htaccess.
Title: Re: why mod security off in htaccess
Post by: Nodaz on December 27, 2020, 04:49:56 PM
Quote from: Sir Osis of Liver on December 26, 2020, 05:20:10 PM
mod_security has caused problems on many forums, recommendation is to disable it.  Usually can be done in cpanel.  AFAIK there isn't a mod that disables it via .htaccess.
Ty
I have disabled it in cpanel
Text only | Text with Images