Re: [mod-security-users] locations in windows, XSS

[Ivan R. <iv...@we...>]

Daniel Guido wrote:
> /feedback.php is a little bit of overkill in my case.  ive got about 20
> different subdomains and the feedback.php script only exists on
> www.xxxx.com and not dave.xxxx.com or etc.xxxx.com.  i'll use it, but is
> there another way to specify only that script?

  Why don't you put the <Location> part only into one virtual host?


> and how would i know if i configured php correctly?

  By reading about dynamic filtering in the manual? :)

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]