Re: [mod-security-users] mod_security status 200

[Ivan R. <iv...@we...>]

xx...@im... wrote:
> I can see the custom 404 error page,
> but the SecFilterSelective doesn't work
> (the SecFilterSelective looks for text in the custom 404 page)
> 
> The debug log says "Filtering off for a subrequest"

  You don't need mod_security for the approach I suggested.

  You only need to put some code in error404.php like
  this:

  <?
  header("HTTP/1.0 200 OK");
  echo("Error page...");
  ?>

-- 
Ivan Ristic
Apache Security (O'Reilly) - http://www.apachesecurity.net
Open source web application firewall - http://www.modsecurity.org