|
From: Jeff T. <jt...@tc...> - 2006-02-14 21:41:24
|
I am having issues with one of my sites after upgrading to version 1.9.2 of mod_security. I did not change my mod_security file at all. The problem: all "virtual" includes (ie: <!--#include virtual="/include/ header.inc" --> ) do not work. No errors are generated in the html that is exported. No errors are generated in the apache error log. no errors are logged in the SecAuditLog. If i disable mod_security for this particular vhost everything works fine. There is no output (with SecFilterDebugLog set to level 9) that contains "header.inc" in it. I am getting this message for "footer.inc" however: [14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/ include/footer.inc][2] Detection phase starting (request 9b64028): "GET /t.php HTTP/1.1" [14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/ include/footer.inc][9] Found msr (9b6a218) in r->main (9bb4488) [14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/ include/footer.inc][2] sec_check_access: Filtering off, not an initial request [14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/ include/footer.inc][9] sec_insert_filter: Starting [14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/ include/footer.inc][9] Found msr (9b6a218) in r->main (9bb4488) [14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/ include/footer.inc][2] scan_pre: Adding output filter [14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/ include/footer.inc][3] sec_filter_out: start [14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/ include/footer.inc][9] Found msr (9b6a218) in r->main (9bb4488) [14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/ include/footer.inc][3] sec_filter_out: Content-Type = "(null)" [14/Feb/2006:16:28:02 --0500] [www1domain.domain/sid#9a4b580][rid#9b64028][/ include/footer.inc][3] sec_filter_out: got 567 bytes, bufused=0, buflen=16384 when i've done searches for some of these things all i've found are references back to the source code of mod_security. i am completely baffled by this, have tried everything i can think of and searched everywhere i can think of. The fact that there are no errors generated anywhere is what has me completely confused. Oh, everything works just fine with mod_security 1.8.7. any help would be very much appriciated. Thanks .jeff. |
