[mod-security-users] Re: Vbulletin 3.5.2 and mod_security

[Thomas B. <web...@sp...>]

Ivan Ristic wrote:
> 
> 
>   The above (%u20AC) is not a valid URL-encoded character. I suspect
>   this is a programming error in vbulletin. I also suspect they
>   should encode the character like this: %25u20AC.
> 
>   You can allow it simply by turning URL-encoding validation off:
> 
>     SecFilterCheckURLEncoding Off
> 

I deactivated this Option for testing, and it worked. But i hoped
someone know how to set a filter rule for this problem. Anyway, for now
its working well, i dont think its very risky to deactivate this option.
Thanks for help.

MFG
Thomas Behrend