Mod-security exception rule for url as parameter [

Question

I am new to mod security and was able to install it on my servers. However after its installation the website hosted is breaking up. After tracing the issue I was able to figure out that its not allowing me to pass url as a paramater in php code. eg: xyz.php?url=http://www.example.com/img/abc.jpg&param2=xyz Can there be any exceptions that can be added to modsecurity so that it allows to pass url as paramaters.

Thanking You,

Aazim

Answer 1

Adding a rule to ignore that particular arg to your vhost should do it

SecRule !ARGS:url

Answer 2

You need to find the mod_security rule Id from the logs then add the directive below to your virtualhost section:

SecRuleRemoveById

Example:

SecRuleRemoveById 950005

Are you able to view the apache and modsec logs?