ModSecurity blocking PHPMySQL
I am pretty new to Modsecurity and after the installation I am having problems using PHPMyAdmin.
I can see in the secaudit logs this is the line that is blocking it:
modsecurity_crs_40_generic_attacks.conf
"phase:2,capture,t:none,t:htmlEntityDecode,t:lowercase,t:replaceComments,t:compressWhiteSpace,ctl:auditLogParts=+E,log,auditlog,msg:'Blind SQL Injection Attack',id:'950007',tag:'WEB_ATT
ACK/SQL_INJECTION',logdata:'%{TX.0}',severity:'2'"
I do want to keep the server locked down so can you put a rule in place to exclude my particular PHPMySQL app? Can anyone help me out?
