Portal Home > Knowledgebase > Articles Database > Mod_Security & Whitelist WHM
Mod_Security & Whitelist WHM
| Posted by kshazad86, 02-13-2011, 08:29 AM |
| Hi,
I have a user that is having problems displaying some thumbnails in Wordpress and says its because of mod_security.
Does anyone know I can disable it for a single account in WHM, or how I can whitelist the domain?
|
| Posted by RoseHosting, 02-13-2011, 09:14 AM |
| You can add the following lines to your user's configuration:
SecRuleEngine Off
Then, restart your Apache service for the changes to take effect.
|
| Posted by sfchost, 02-13-2011, 09:24 AM |
| I wouldn't recommend turning mod_security off completely for the site. Take a look at the free ConfigServer ModSecurity Control (cmc) from Sparky at http://configserver.com/cp/cmc.html
With CMC, you can easily turn off just the offending rule for the site rather than all of them.
|
| Posted by kshazad86, 02-13-2011, 09:42 AM |
| Couple of things...
I've turned off using mod_security as shown in the first reply, but the thumbnails are still not showing on the site?
Also, the website itself is installed in as an addon domain, will this have any effect?
How can I find the offending rules that are causing the problem?
|
| Posted by sfchost, 02-13-2011, 10:02 AM |
| If you turned off mod_security and your still having this issue, then it's probably not a rule issue. Check the http log or search for an error_log file in the same directory as the thumbnail script for possible hints of whats wrong. Could be as simple as a permissions issue...
You should be able to find the rule in /usr/local/apache/logs/modsec_audit.log or if you install the CMC plugin, there is a button to easily see the mod_security log from WHM vs having to shell into the server...
|
| Posted by kshazad86, 02-13-2011, 10:38 AM |
| Thanks for the info...
I have installed cmc, the log is completely empty, and so I am safe to assume that mod_securisty is definitely not what is causing the problem?
|
| Posted by serversoldiers, 02-13-2011, 09:48 PM |
| f you have turned off mod_securisty and even then issue persists then mod_securisty is not the culprit. Find out the PHP modules (such as GD, TTF etc.) necessary for thumbmail generation and make sure that the server has that modules.
|
Add to Favourites 
Print this Article
Also Read
DEADnow (Views: 800)
Shared Hosting
Shared Hosting
