Mod security resulted in 406 error

DML · Nov 23, 2005

Hey guys, please bear with me as I am new to php.

My hosting company recently installed mod_security on their servers.

I use a mod_rewrite on my website for SEF Url's. I am currently getting a 406 error on them. I emailed support and the response was:
Access denied with code 406. Pattern match "/../../ " at THE_REQUEST

From what I understand(very little), this means that my sef.php file is incorrectly coded in that I need to use the entire URL and not the shortcut(../).

Please advise, I have a campaign starting on Monday and all URL's that were previously indexed by search engines do not work. I don't have a clue on how to change this in the php file.

Much appreciated,

Rob Holmes · Nov 23, 2005

Mod_security is a serverhardening module for apache.

It has been known to break some sites.

If your hosting company can't support issues arising from their own actions I suggest they shouldn't have installed it.

Heres a helpful site with too many white papers for me to read through for you

http://www.modsecurity.org/

Hope this helps,

Rob

DML · Nov 24, 2005

Thanks Rob

I read through the documentation, doesn't seem to help though. Removing multiple forward slash characters are in fact an anti-evasion technique in ModSecurity.

My problem is I don't know where to change this in my sef.php file in order to eliminate the slashes.

Rob Holmes · Nov 24, 2005

You will need to ask your host to create an exclusion entry for your site in their mod_security exclusion config files

See: http://www.thematrixx.com/?go=62388980a1

Hope this helps,

Rob

Search

Search

Mod security resulted in 406 error

DML

Rob Holmes

DML

Rob Holmes

Similar threads

Latest Articles