Mod-security exception rule for url as parameter [closed]

Question

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.

---

Want to improve this question? Update the question so it's on-topic for Stack Overflow.

Closed 7 years ago.

Improve this question

I am new to mod security and was able to install it on my servers. However after its installation the website hosted is breaking up. After tracing the issue I was able to figure out that its not allowing me to pass url as a paramater in php code. eg: xyz.php?url=http://www.example.com/img/abc.jpg&param2=xyz Can there be any exceptions that can be added to modsecurity so that it allows to pass url as paramaters.

Thanking You,

Aazim

Answer 1

You need to find the mod_security rule Id from the logs then add the directive below to your virtualhost section:

SecRuleRemoveById

Example:

SecRuleRemoveById 950005

Are you able to view the apache and modsec logs?

Answer 2

Adding a rule to ignore that particular arg to your vhost should do it

SecRule !ARGS:url