From cfa62d8ce030af0e326185cd0a2a7664729175c8 Mon Sep 17 00:00:00 2001 From: vasco Date: Tue, 2 Jun 2026 23:22:37 +0100 Subject: [PATCH] kys14 --- conf/modsecurity.conf | 1 - 1 file changed, 1 deletion(-) diff --git a/conf/modsecurity.conf b/conf/modsecurity.conf index 7c7856f..927966b 100644 --- a/conf/modsecurity.conf +++ b/conf/modsecurity.conf @@ -8,7 +8,6 @@ SecAuditLogType Serial SecAuditLog /var/log/modsecurity/audit.log # sql injection -SecRule REQUEST_URI|ARGS "['\";]|--" \ SecRule REQUEST_URI|ARGS "(?i:(?:select|insert|update|delete|drop|union|create|alter|truncate)\s+.+\s+from|'[^']*'|--|;|\b(or|and)\b\s+\d+\s*=\s*\d+)" \ "id:950001,phase:1,deny,status:403,msg:'SQL INJECTION ATTACK DETECTED!!!',log,t:urlDecode,t:sqlHexDecode,t:lowercase"