Without knowing your ModSecurity configurations, this is hard to diagnose.  You may have a ModSecurity filter/rule that is taking some sort of action (redirect possibly).  Turn on the ModSecurity debug log and set it to 9.  Run your requests and then look in the debug log for evidence as to what modsecurity is doing.
 
--
Ryan C. Barnett
Web Application Security Consortium (WASC) Member
CIS Apache Benchmark Project Lead
SANS Instructor, GCIA, GCFA, GCIH, GSNA, GCUX, GSEC
Author: Preventing Web Attacks with Apache

 
On 10/30/06, Mathias Gisch <m.gisch@mx.uni-saarland.de> wrote:

Dear Ryan,

 

thank you for your reply. But how come if I have mod-Security turned off, it all works perfectly?

 

Mathias

 

 


Von: Ryan Barnett [mailto: rcbarnett@gmail.com]
Gesendet: Sonntag, 29. Oktober 2006 18:16
An: Mathias Gisch
Cc: mod-security-users@lists.sourceforge.net
Betreff: Re: [mod-security-users] mod_security mod_rewrite Problem

 

I understand the problem - when your mod_rewrite rule triggers, the browser changes the request method from POST to GET since your rewrite rule is sending a redirect to the browser.  You should try and update your rule so that it does NOT use an absolute URL or try and use the Proxy action [P] in mod_rewrite to get the client to the right file (as the proxy action would maintain the request method).

 

This has nothing to do with modsecurity.

 

--
Ryan C. Barnett
Web Application Security Consortium (WASC) Member
CIS Apache Benchmark Project Lead
SANS Instructor, GCIA, GCFA, GCIH, GSNA, GCUX, GSEC
Author: Preventing Web Attacks with Apache

 

On 10/29/06, Mathias Gisch < m.gisch@mx.uni-saarland.de> wrote:

Hi everybody,

 

I am using mod_security for the first time. However, I have the following problem in combination with mod_rewrite:

 

I have a form which posts data via the POST-Method to signup.html. The rewrite enigne rewrites signup.html to index.php?op=news&do=signup. The problem now is that after the rewrite the POST-Data won't arrive at the php script. If i have my form post directly to index.php?op=news&do=signup it works perfectly.

 

I would aprreciate any help.

 

Best regards,

 

            Mathias


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
mod-security-users mailing list
mod-security-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users