Lsws 4.1.1

DraCoola

Well-Known Member
#3
this v4.1.1 suddenly triggering modsec rule :

Code:
SecRule REQUEST_COOKIES:PHPSESSID "!^[0-9a-z]*$"
which was not happen while using v4.1 and apache 2.2.17 - 2.2.18

 
Last edited:

mistwang

LiteSpeed Staff
#4
Can you check the request header with firebug or liveheader, what is the value of
REQUEST_COOKIES:pHPSESSID ?

Also, please enable LSWS debug logging

and Mod security debug logging

SecDebugLogLevel 9

It should show what exactly happened.
 

DraCoola

Well-Known Member
#5
Thank you george for your kind attention.
I decide to temporarily backward to v4.1 right now and wait until my mod_sec rule set finished on your investigation.

many thanks! :)
 
Top