ModSecurity | WordPress.org

pickme
(@pickme)

4 years, 1 month ago
Hi,

Renaming wp-admin creates modsecurity’s firewall issue. Is there a way to encode the custom code so the modsecurity regex will not catch it? There is a pattern match on what the Code Snippets sends to the server e.g. <\\\\?(?!xml\\\\s)

Thank you
- This topic was modified 4 years, 1 month ago by pickme.

Viewing 2 replies - 1 through 2 (of 2 total)

Plugin Author Shea Bunge
(@bungeshea)

4 years ago

Hi @pickme,

I’m not entirely sure how mod_security handles catching custom code. If you’re able to whitelist the wp-content/plugins/code-snippets directory or wp-admin/admin.php (depending on whether mod_security works on a source or URL basis), then it should prevent it from catching snippet code.

Plugin Author Shea Bunge
(@bungeshea)

4 years ago

Hi @pickme,

Looks like Victor has found a solution to this in another thread. Here’s the link; hopefully it will work for you as well: https://wordpress.org/support/topic/file-not-found-when-saving-snippets/

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘ModSecurity’ is closed to new replies.

2 replies
2 participants
Last reply from: Shea Bunge
Last activity: 4 years ago
Status: not a support question