Bypassing mod_security2 + apache2
Wednesday, February 13th, 2008Normally, you can easily bypass mod_security2 + apache 1.3.x by adding this code in your .htaccess file :
<ifModule mod_security.c>
SecFilterEngine off
</ifModule>
But in apache2, you can’t use the code to bypass mod_security2 rules for 2 reasons :
- Use SecRuleEngine instead of SecFilterEngine. Why ? Because SecFilterEngine didn’t exist in mod_security2 with apache2
- if you use SecRuleEngine Off in your .htaccess, you’ll get HTTP 500 error .
So use this code directly in your httpd.conf :
<ifModule mod_security2.c>
SecRuleEngine off
</ifModule>
[Worrying Start]
The code won’t last long, since httpd.conf will be auto-generated for CPanel server (server that running CPanel?). I guess i should add a new line in CPanel template’s vhost.default per vhost.servername. hmm…
** membacanya saja saya sulit, apalagi menulis disitu ** ![]()
[/Worrying Stop]


Sebenarnya ngga sulit juga untuk pindah dari Firefox ke Opera. Kalau ngga bisa menyesuaikan diri, kenapa ngga Opera aja yang di-customize supaya ( hampir ) mirip dengan Firefox. Here’s what i’ve done to my Opera.


