{"id":2425,"date":"2010-02-10T03:34:29","date_gmt":"2010-02-10T08:34:29","guid":{"rendered":"http:\/\/g33kinfo.com\/info\/?p=2425"},"modified":"2010-02-10T03:34:29","modified_gmt":"2010-02-10T08:34:29","slug":"modsec-no-id-in-error-message","status":"publish","type":"post","link":"https:\/\/g33kinfo.com\/info\/modsec-no-id-in-error-message\/","title":{"rendered":"Modsec: no ID in error message"},"content":{"rendered":"

If you are receiving a modsec error in the apache error log;
\n
\n[Wed Feb 10 02:02:32 2010] [error] [client 192.168.0.1] ModSecurity:
\nAccess denied with code 500 (phase 2).
\nPattern match \"\\\\.php\\\\?.*loc=(http|https|ftp)\\\\:\\\\\/\" at REQUEST_URI.
\n[file \"\/usr\/local\/apache\/conf\/modsec2.user.conf\"] [line \"302\"]
\n[hostname \"domain.com\"] [uri \"\/folder\/file.php\"]
\n[unique_id \"S3JaCEPjyqQAAAOO2foAAAAY\"]
\n<\/code>
\nand it does not give an ID number allowing you to whitelist the rule by ID as usual;
\n
\n
\n SecRuleRemoveById 300162 300163 300170
\n <\/locationmatch>
\n<\/code>
\nYou can use the SecRuleRemoveByMsg instead to allow the addition of the rule to the whitelist
\n
\n
\nSecRuleRemoveByMsg \"\\.php\\?.*loc=(http|https|ftp)\\:\\\/\"
\n<\/locationmatch>
\n<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"

If you are receiving a modsec error in the apache error log; [Wed Feb 10 02:02:32 2010] [error] [client 192.168.0.1] ModSecurity: Access denied with code 500 (phase 2). Pattern match “\\\\.php\\\\?.*loc=(http|https|ftp)\\\\:\\\\\/” at REQUEST_URI. [file “\/usr\/local\/apache\/conf\/modsec2.user.conf”] [line “302”] [hostname “domain.com”] [uri “\/folder\/file.php”] [unique_id “S3JaCEPjyqQAAAOO2foAAAAY”] and it does not give an ID number allowing you to whitelist… <\/p>\n

Read More<\/i><\/a><\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[],"class_list":["post-2425","post","type-post","status-publish","format-standard","hentry","category-info"],"yoast_head":"\nModsec: no ID in error message - Linux Shtuff<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/g33kinfo.com\/info\/modsec-no-id-in-error-message\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Modsec: no ID in error message - Linux Shtuff\" \/>\n<meta property=\"og:description\" content=\"If you are receiving a modsec error in the apache error log; [Wed Feb 10 02:02:32 2010] [error] [client 192.168.0.1] ModSecurity: Access denied with code 500 (phase 2). Pattern match "\\.php\\?.*loc=(http|https|ftp)\\:\\\/" at REQUEST_URI. [file "\/usr\/local\/apache\/conf\/modsec2.user.conf"] [line "302"] [hostname "domain.com"] [uri "\/folder\/file.php"] [unique_id "S3JaCEPjyqQAAAOO2foAAAAY"] and it does not give an ID number allowing you to whitelist... Read More\" \/>\n<meta property=\"og:url\" content=\"https:\/\/g33kinfo.com\/info\/modsec-no-id-in-error-message\/\" \/>\n<meta property=\"og:site_name\" content=\"Linux Shtuff\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/fb.me\/g33kinf0\" \/>\n<meta property=\"article:author\" content=\"https:\/\/fb.me\/g33kinf0\" \/>\n<meta property=\"article:published_time\" content=\"2010-02-10T08:34:29+00:00\" \/>\n<meta name=\"author\" content=\"g33kadmin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/drsinger1111\" \/>\n<meta name=\"twitter:site\" content=\"@drsinger1111\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/modsec-no-id-in-error-message\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/modsec-no-id-in-error-message\\\/\"},\"author\":{\"name\":\"g33kadmin\",\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/#\\\/schema\\\/person\\\/c022e4c40b13ea1b678e6f020756f547\"},\"headline\":\"Modsec: no ID in error message\",\"datePublished\":\"2010-02-10T08:34:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/modsec-no-id-in-error-message\\\/\"},\"wordCount\":52,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/#\\\/schema\\\/person\\\/c022e4c40b13ea1b678e6f020756f547\"},\"articleSection\":[\"General Info\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/g33kinfo.com\\\/info\\\/modsec-no-id-in-error-message\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/modsec-no-id-in-error-message\\\/\",\"url\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/modsec-no-id-in-error-message\\\/\",\"name\":\"Modsec: no ID in error message - Linux Shtuff\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/#website\"},\"datePublished\":\"2010-02-10T08:34:29+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/modsec-no-id-in-error-message\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/g33kinfo.com\\\/info\\\/modsec-no-id-in-error-message\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/modsec-no-id-in-error-message\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Modsec: no ID in error message\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/#website\",\"url\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/\",\"name\":\"Linux Shtuff\",\"description\":\"Because I have CRS Syndrome...\",\"publisher\":{\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/#\\\/schema\\\/person\\\/c022e4c40b13ea1b678e6f020756f547\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/#\\\/schema\\\/person\\\/c022e4c40b13ea1b678e6f020756f547\",\"name\":\"g33kadmin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/wp-content\\\/uploads\\\/2022\\\/07\\\/minion-researchA.gif\",\"url\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/wp-content\\\/uploads\\\/2022\\\/07\\\/minion-researchA.gif\",\"contentUrl\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/wp-content\\\/uploads\\\/2022\\\/07\\\/minion-researchA.gif\",\"width\":512,\"height\":512,\"caption\":\"g33kadmin\"},\"logo\":{\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/wp-content\\\/uploads\\\/2022\\\/07\\\/minion-researchA.gif\"},\"description\":\"I am a g33k, Linux blogger, developer, student and Tech Writer for Liquidweb.com\\\/kb. My passion for all things tech drives my hunt for all the coolz. I often need a vacation after I get back from vacation....\",\"sameAs\":[\"https:\\\/\\\/thelinuxreport.com\",\"https:\\\/\\\/fb.me\\\/g33kinf0\",\"https:\\\/\\\/x.com\\\/https:\\\/\\\/twitter.com\\\/drsinger1111\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Modsec: no ID in error message - Linux Shtuff","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/g33kinfo.com\/info\/modsec-no-id-in-error-message\/","og_locale":"en_US","og_type":"article","og_title":"Modsec: no ID in error message - Linux Shtuff","og_description":"If you are receiving a modsec error in the apache error log; [Wed Feb 10 02:02:32 2010] [error] [client 192.168.0.1] ModSecurity: Access denied with code 500 (phase 2). Pattern match \"\\.php\\?.*loc=(http|https|ftp)\\:\\\/\" at REQUEST_URI. [file \"\/usr\/local\/apache\/conf\/modsec2.user.conf\"] [line \"302\"] [hostname \"domain.com\"] [uri \"\/folder\/file.php\"] [unique_id \"S3JaCEPjyqQAAAOO2foAAAAY\"] and it does not give an ID number allowing you to whitelist... Read More","og_url":"https:\/\/g33kinfo.com\/info\/modsec-no-id-in-error-message\/","og_site_name":"Linux Shtuff","article_publisher":"https:\/\/fb.me\/g33kinf0","article_author":"https:\/\/fb.me\/g33kinf0","article_published_time":"2010-02-10T08:34:29+00:00","author":"g33kadmin","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/drsinger1111","twitter_site":"@drsinger1111","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/g33kinfo.com\/info\/modsec-no-id-in-error-message\/#article","isPartOf":{"@id":"https:\/\/g33kinfo.com\/info\/modsec-no-id-in-error-message\/"},"author":{"name":"g33kadmin","@id":"https:\/\/g33kinfo.com\/info\/#\/schema\/person\/c022e4c40b13ea1b678e6f020756f547"},"headline":"Modsec: no ID in error message","datePublished":"2010-02-10T08:34:29+00:00","mainEntityOfPage":{"@id":"https:\/\/g33kinfo.com\/info\/modsec-no-id-in-error-message\/"},"wordCount":52,"commentCount":0,"publisher":{"@id":"https:\/\/g33kinfo.com\/info\/#\/schema\/person\/c022e4c40b13ea1b678e6f020756f547"},"articleSection":["General Info"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/g33kinfo.com\/info\/modsec-no-id-in-error-message\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/g33kinfo.com\/info\/modsec-no-id-in-error-message\/","url":"https:\/\/g33kinfo.com\/info\/modsec-no-id-in-error-message\/","name":"Modsec: no ID in error message - Linux Shtuff","isPartOf":{"@id":"https:\/\/g33kinfo.com\/info\/#website"},"datePublished":"2010-02-10T08:34:29+00:00","breadcrumb":{"@id":"https:\/\/g33kinfo.com\/info\/modsec-no-id-in-error-message\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/g33kinfo.com\/info\/modsec-no-id-in-error-message\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/g33kinfo.com\/info\/modsec-no-id-in-error-message\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/g33kinfo.com\/info\/"},{"@type":"ListItem","position":2,"name":"Modsec: no ID in error message"}]},{"@type":"WebSite","@id":"https:\/\/g33kinfo.com\/info\/#website","url":"https:\/\/g33kinfo.com\/info\/","name":"Linux Shtuff","description":"Because I have CRS Syndrome...","publisher":{"@id":"https:\/\/g33kinfo.com\/info\/#\/schema\/person\/c022e4c40b13ea1b678e6f020756f547"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/g33kinfo.com\/info\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/g33kinfo.com\/info\/#\/schema\/person\/c022e4c40b13ea1b678e6f020756f547","name":"g33kadmin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/g33kinfo.com\/info\/wp-content\/uploads\/2022\/07\/minion-researchA.gif","url":"https:\/\/g33kinfo.com\/info\/wp-content\/uploads\/2022\/07\/minion-researchA.gif","contentUrl":"https:\/\/g33kinfo.com\/info\/wp-content\/uploads\/2022\/07\/minion-researchA.gif","width":512,"height":512,"caption":"g33kadmin"},"logo":{"@id":"https:\/\/g33kinfo.com\/info\/wp-content\/uploads\/2022\/07\/minion-researchA.gif"},"description":"I am a g33k, Linux blogger, developer, student and Tech Writer for Liquidweb.com\/kb. My passion for all things tech drives my hunt for all the coolz. I often need a vacation after I get back from vacation....","sameAs":["https:\/\/thelinuxreport.com","https:\/\/fb.me\/g33kinf0","https:\/\/x.com\/https:\/\/twitter.com\/drsinger1111"]}]}},"_links":{"self":[{"href":"https:\/\/g33kinfo.com\/info\/wp-json\/wp\/v2\/posts\/2425","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/g33kinfo.com\/info\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/g33kinfo.com\/info\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/g33kinfo.com\/info\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/g33kinfo.com\/info\/wp-json\/wp\/v2\/comments?post=2425"}],"version-history":[{"count":0,"href":"https:\/\/g33kinfo.com\/info\/wp-json\/wp\/v2\/posts\/2425\/revisions"}],"wp:attachment":[{"href":"https:\/\/g33kinfo.com\/info\/wp-json\/wp\/v2\/media?parent=2425"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/g33kinfo.com\/info\/wp-json\/wp\/v2\/categories?post=2425"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/g33kinfo.com\/info\/wp-json\/wp\/v2\/tags?post=2425"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}