Search found 4 matches

by augiem
Tue Mar 29, 2011 5:40 pm
Forum: Atomicorp Free Modsecurity Rules
Topic: Help with rules for Drupal site
Replies: 11
Views: 22983

Re: Help with rules for Drupal site

I changed the way my user profile worked by removing the http:// from the fields expecting that to work, but then ran into the same problem with any links embedded into my Bio textarea field. However I do not have the same problems with multiple links in Drupal node body fields (blog, page, etc). It...
by augiem
Tue Mar 29, 2011 2:36 pm
Forum: Atomicorp Free Modsecurity Rules
Topic: Help with rules for Drupal site
Replies: 11
Views: 22983

Re: Help with rules for Drupal site

Thanks for the reply. I'm glad to hear it was fixed. Too bad it will take some time for it to show up. I guess I'll leave the rule exclusions for now. The site hosting a single web page with trusted administrators, so I don't think there will be much of a security threat for now. I will suggest the ...
by augiem
Mon Mar 28, 2011 5:25 pm
Forum: Atomicorp Free Modsecurity Rules
Topic: Help with rules for Drupal site
Replies: 11
Views: 22983

Re: Help with rules for Drupal site

Yeah, dont turn these off the way you have, thats a total global exclusion you've got there. :-) Thanks for the reply! Well, I've only got one site on the server so it's probably not as bad as it could be but... So I've clipped what I think is important from the audit log and censored out sensitive...
by augiem
Mon Mar 28, 2011 3:33 pm
Forum: Atomicorp Free Modsecurity Rules
Topic: Help with rules for Drupal site
Replies: 11
Views: 22983

Help with rules for Drupal site

I've got a Drupal site with a custom user profiles page that allows users to enter URLs for their social sites like Twitter and Facebook. Because these form textfields can contain the string "http://" in them, when I try to save the user profile page I'm getting blocked (rules listed below...