ModSecurity 403访问被拒绝

问题描述 投票:0回答:1

当我尝试访问子目录时,我在日志中出现此错误:

ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".profile" at ARGS:scope. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/09_Global_Other.conf"] [line "57"] [id "210580"] [rev "1"] 

请求在URI中有.profile单词,但我在Google登录范围中使用它。 它是否可能,.htaccess禁用它?我已经尝试过使用它了:

<IfModule mod_security.c>
  SecFilterEngine Off
  SecFilterScanPOST Off
</IfModule> 

但它不起作用。 我试着将它放在root .htaccess文件和子目录.htaccess文件中。

更新: 浏览器中的错误是:

Forbidden
You don't have permission to access /SUBDIR/index.php on this server.
Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.
google-authentication mod-security
1个回答
1
投票

试试这个:

 <IfModule mod_security2.c>
     SecRuleUpdateTargetById 210580 !ARGS:'scope'
</IfModule>
© www.soinside.com 2019 - 2024. All rights reserved.