diff --git a/conf/modsecurity.conf b/conf/modsecurity.conf index 0dc20ea..9e557c1 100644 --- a/conf/modsecurity.conf +++ b/conf/modsecurity.conf @@ -8,16 +8,21 @@ SecAuditLogType Serial #SecAuditLog /var/log/modsecurity/audit.log # SQL Injection protection -SecRule ARGS "(?i)(union(\s+all)?\s+select|select\s+.*\s+from|insert\s+into|update\s+.*\s+set|delete\s+from|drop\s+table|or\s+1=1|--|#|/\*|\*/|\bexec\b|\bexecute\b)" "id:'950001',phase:2,deny,status:403,msg:'SQL Injection Attack Detected',log" +SecRule ARGS "(?i)(union(\s+all)?\s+select|select\s+.*\s+from|insert\s+into|update\s+.*\s+set|delete\s+from|drop\s+table|or\s+1=1|--|#|/\*|\*/|\bexec\b|\bexecute\b)" \ + "id:950001,phase:2,deny,status:403,msg:'SQL Injection Attack Detected',log" # XSS / HTML Injection protection -SecRule ARGS "(?i)