From 30a9483402da0731f31a0a1c3e21f24b43e42425 Mon Sep 17 00:00:00 2001
From: vasco <vasco@vascoalves.xyz>
Date: Tue, 2 Jun 2026 23:57:15 +0100
Subject: [PATCH] kys18

---
 conf/modsecurity.conf | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/conf/modsecurity.conf b/conf/modsecurity.conf
index 8b0b235..be4a71c 100644
--- a/conf/modsecurity.conf
+++ b/conf/modsecurity.conf
@@ -16,9 +16,9 @@ SecRule ARGS "(?i)\b(select|insert|update|delete|drop|union|grant|alter|truncate
     "id:950002,phase:2,deny,status:403,msg:'SQL Injection: Keyword',log,t:urlDecode,t:lowercase"
 
 # sql3 (teste)
-SecRule ARGS|ARGS_NAMES|REQUEST_COOKIES|REQUEST_COOKIES_NAMES|REQUEST_HEADERS|XML:/*|JSON:/* \
-    "(?i)(select\s|insert\s|update\s|delete\s|drop\s|union\s|--|#|/\*|\*/|'|\"|%27|%22|<script>|<|>|%3C|%3E|exec\s|system\s|/etc/passwd|\.\./|%00)" \
-    "id:950100,phase:2,deny,status:403,msg:'SQL',log,t:urlDecode,t:lowercase"
+# SecRule ARGS|ARGS_NAMES|REQUEST_COOKIES|REQUEST_COOKIES_NAMES|REQUEST_HEADERS|XML\
+#    "(?i)(select\s|insert\s|update\s|delete\s|drop\s|union\s|--|#|/\*|\*/|'|\")"\
+#    "id:950100,phase:2,deny,status:403,msg:'SQL',log,t:urlDecode,t:lowercase"
 
 # xss / html injection
 SecRule REQUEST_URI|ARGS "(<.*>)|(%3C.*%3E)" \