RE: [mod-security-users] I get requests like:

[Sub Z. <Su...@su...>]

>> Access denied with code 406. Pattern match "!^[0-9a-f]*$" at
>> ARG("PHPSESSID")
>> 
>> How do I add ; to the argument seperators?
>
> Put in the character set "!^[0-9a-f;]*$"

Is this an internal bug of mod_security? Can't I define ; as an argument
seperator like &?

Tom, you can see that adding ; to the characterset will not fix those issues
(because of other parameters in the url like board=10.0 or topic=9.new or
etc) but open more PHPSESSID security vulnerabilities.. I also do not want
to extend a-f to another characterset...