Modsecurity/Mod_Rewrite and FilesMatch apache directive

[oka]

Hi all.

 

I had setup modsecurity with prestashop with mod_rewrite for friendly url.

 

Now what i need is to set a <FilesMatch> directive in apache for catch a variable in authentication.php so i write this directive :

 

<FilesMatch "authentication\.php">
SecRule ARGS:email [email protected]
</FilesMatch>

 

But it is not matching anything

 

Then i set up this:

 

<FilesMatch "AuthController\.php">
SecRule ARGS:email [email protected]
</FilesMatch>

 

and does not work, so i think my mod_rewrite brokes the hability to FilesMatch a script.

 

The question is how to match a script in apache with mod_rewrite (i think)?

 

Regards.

[gkontos]

Hi oka,

 

mod_rewrite and mod_security are 2 different modules.

 

mod_rewrite main purpose is to rewrite URLS to a more user friendly style. The fact that it uses regular expressions to match a rewrite can be used as a first level of defense. But its main purpose is to rewrite

 

mod_security on the other hand has been evolved to a very powerful web application firewall. So, in your case you would need to read and experiment with it. A word of warning, never experiment with mod_security in a production environment.

[oka]

Hi gkontos.

 

I know what is modsec and rewrite

 

The problem is if i setup prestashop wihtout rewrite i can do this :

<FilesMatch "authentication\.php">
SecRule ARGS:email [email protected]
</FilesMatch>

 

And with prestashop with mod_rewrite enabled i can't do it.

 

Regards.

[gkontos]

Hi gkontos.

 

I know what is modsec and rewrite

 

The problem is if i setup prestashop wihtout rewrite i can do this :

<FilesMatch "authentication\.php">
SecRule ARGS:email [email protected]
</FilesMatch>

 

And with prestashop with mod_rewrite enabled i can't do it.

 

Regards.

 

Ok then I apologize for the lesson

 

Depending on the languages you use, how about something like that:

 

FilesMatch ^en/authentication$

 

Cheers,

 

George

[oka]

Hi gkontos.

 

I'm using only spanish and the url is like : http://www.example.com/autenticacion

 

So i setup this:

 

 

<FilesMatch "^autenticacion$">
SecRule ARGS:email [email protected]
</FilesMatch>
</IfModule>

 

But it is not working like expected.

 

Regards

[laurencarter]

To solve the problem of my Apache server log for some domains exceeding the 2GB filesize limit, I've recently added some extra directives to httpd.conf to log images to a separate log.

Hcg Ultra