modsec issues
Can someone help me figure out why this modsec rule don't work in Litespeed, but work in Apache?
SecRule REQUEST_FILENAME ".{1,}paypal\.com{1,}" "phase:1,t:none,log,deny"
It's a simple request, to block the request if there is paypal.com anywhere in the URL string.
example: domain.com/hi/paypal.com/file.html or domain.com/hellopaypal.com/
Is there another way I should be doing this via Litespeed?
|
Threaded Mode