Re: [mod-security-users] Error 500 in all sites.

[Ivan R. <iv...@we...>]

Alberto Ferrer wrote:

> Hello, im testing your apache module and works good,
 > but in a site with PHPNuke not works, cause error 500
 > every time if a post a news, or reading the module
 > of forums, can u help me?

   I don't use PHPNuke myself but I'd say that the likely
   rule causing you problems is this one:


> SecFilter "<(.|\n)+>"

   It forbids any HTML in the incoming parameters. Perhaps
   you are using HTML in your posts?

   ...

   But we don't have to guess. Have a look in the Apache
   error_log, mod_security will state the reason it rejected
   a request. Also, I can see that you're using the
   audit log set to relevant only. Your audit log therefore
   contains all violations. Send the audit log to my
   private email address and I'll tell you exactly what's
   happening.

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]