Re: [mod-security-users] AddType/AddHandler

[Ivan R. <iv...@we...>]

On 12/22/05, Justin Grindea <web...@sw...> wrote:
> hi,
>
> We use H-sphere control panel and it adds AddType php entries. The code i=
s coming from
> a java binary and cannot be edited. While we look for a script that will =
crawl the conf
> files and change it to AddHandler, maybe we can had mod_security to inclu=
de everything that starts
> with AddType application/x-httpd-php in the DynamicOnly scan?

Nope. If that were possible I would have done it already. But you can
ignore stuff based on the extension of the requested file. For example
(put it on top):

SecFilterSelective SCRIPT_FILENAME "!\.php$" allow

Ivan