Re: [mod-security-users] alternatives for waf-fle

[Ervin H. <ai...@gm...>]

Hi Hans,

On Thu, Feb 08, 2024 at 05:57:11PM +0100, Hans Mayer wrote:
> > (actually I don't understand what does it mean "by klaubert")
> 
> Sorry, if I didn't explain understandable what's the issue. The maintainer
> for "waf-fle" is klaubert. Here the link at GitHub:
> https://github.com/klaubert/waf-fle

oh, sorry for my dump question :), I should have looked up.
 
> Apache with mod-sec is working fine. But waf-fle is not working any more.
> "waf-fle" was the tool to display the alerts coming from mod-sec.
> "waf-fle" is written in PHP and obviously using calls, which are not supported any more, like "apache_setenv()"
> 
> So I am looking for an alternative to view the log entries generated by "mod-sec"
> 
> I hope this explains a little bit more my issue.

yes, definitely. Especially you mentioned that the waf-fle does
not work with the new 8.2 PHP version.

First your might try to add an older version of PHP:

https://packages.sury.org/php/

Sury (he is the official maintainer of PHP packages in Debian)
supports older versions of PHP - perhaps those do not have any
security updates, but at least work.



Regards,


a.