Re: [mod-security-users] mod_security 1.8
Brought to you by:
victorhora,
zimmerletw
|
From: Ivan R. <iv...@we...> - 2004-06-16 22:01:04
|
Colin Tinker wrote: > Hi > > I have just installed the above and get this error:- > > modulesSyntax error on line 44 of /etc/mod_security/mod_security.conf: > > The line is:- > > SecFilterSelective HTTP_Content-Type "!^(|application/x-www-form-urlencoded| > multipart/form-data)$" > > Does anyone have any idea why as it is part of the default config file. Because it appears to work with Apache 1.3.27 and Apache 2.x, but not with Apache 1.3.29 (or greater, I think). It complains about the expression being empty. Don't know why. I didn't notice it in my tests. Rewriting that line (of the file) like this: SecFilterSelective HTTP_Content-Type "!(^$|^application/x-www-form-urlencoded$|^multipart/form-data$)" should fix it. I did the same in the configuration in the CVS. -- ModSecurity (http://www.modsecurity.org) [ Open source IDS for Web applications ] |