diff --git a/conf/modsecurity.conf b/conf/modsecurity.conf index 7c7856f..927966b 100644 --- a/conf/modsecurity.conf +++ b/conf/modsecurity.conf @@ -8,7 +8,6 @@ SecAuditLogType Serial SecAuditLog /var/log/modsecurity/audit.log # sql injection -SecRule REQUEST_URI|ARGS "['\";]|--" \ SecRule REQUEST_URI|ARGS "(?i:(?:select|insert|update|delete|drop|union|create|alter|truncate)\s+.+\s+from|'[^']*'|--|;|\b(or|and)\b\s+\d+\s*=\s*\d+)" \ "id:950001,phase:1,deny,status:403,msg:'SQL INJECTION ATTACK DETECTED!!!',log,t:urlDecode,t:sqlHexDecode,t:lowercase"