Themeforest Folie Studio - Apache ModSecurity

- 4 years, 10 months ago max76s
  Participant
  Hi,
  
  I have a few WordPress sites running on a server with Apache and ModSecurity. All my sites run fine except for Folie Studio. If I disable ModSecurity for the site, then it Works Again, but when I re-enable it fails.
  
  How can one use Folie Studio with Apache ModSecurity? Do any specific rules need to be whitelisted?
  
  I have not added any other plugin than those included in the standard theme installation.
  
  All best,
  Max
  
  This topic was modified 4 years, 10 months ago by max76s.
- 4 years, 10 months ago Ludjon
  Keymaster
  
  Hello,
  
  It’s the first time we view this type of issue. Can you please give us credentials to check this? Or open the PHP log files and send us the latest errors from the list.
  
  Please share this information to debug this type of issue. Also, did you activated any other third plugin after ModSecurity?
  
  Thanks
- 4 years, 10 months ago max76s
  Participant
  Hi,
  
  Here I include a link to a google sheets parse of the Apache ModSecurity logs.
  https://drive.google.com/open?id=1UqSAufwmPZcbeUbN-1VabU9lHLMFMyFt
  
  Here I also add a list of the different message rule files and IDs which cause the issues:
  
  Message Rule Files
  REQUEST-920-PROTOCOL-ENFORCEMENT.conf
  REQUEST-930-APPLICATION-ATTACK-LFI.conf
  REQUEST-949-BLOCKING-EVALUATION.conf
  RESPONSE-980-CORRELATION.conf
  REQUEST-932-APPLICATION-ATTACK-RCE.conf
  REQUEST-933-APPLICATION-ATTACK-PHP.conf
  RESPONSE-951-DATA-LEAKAGES-SQL.conf
  REQUEST-941-APPLICATION-ATTACK-XSS.conf
  REQUEST-942-APPLICATION-ATTACK-SQLI.conf
  RESPONSE-953-DATA-LEAKAGES-PHP.conf
  RESPONSE-959-BLOCKING-EVALUATION.conf
  
  Message IDs
  920180
  930130
  949110
  980130
  932140
  933130
  933150
  933160
  933170
  932150
  941160
  932110
  932115
  941100
  941110
  941140
  941190
  941200
  941270
  941310
  941350
  942240
  953100
  959100
  980140
  
  Please let me know after you see the logs so that I can remove the file.
  
  All best,
  Max
  
  This reply was modified 4 years, 10 months ago by max76s.
- 4 years, 10 months ago Ludjon
  Keymaster
  
  Hello,
  
  We need the PHP log files, this is not PHP logfile
  
  Can you send us the website link and wp credentials?
  
  Thanks
  - 4 years, 10 months ago max76s
    Participant
    
    This reply has been marked as private.
- 4 years, 10 months ago Ludjon
  Keymaster
  
  Please check this:
  
  https://wordpress.org/support/topic/problems-with-owasp-modsec-rules-and-wp-cron/
  
  and modify the wp-config file.
  
  This can help you, it’s a bit difficult to debug. Also, try to disable plugins one-by-one and see what can cause the issue
  
  Thanks

Viewing 4 reply threads

You must be logged in to reply to this topic.

Community Forums

Themeforest Folie Studio – Apache ModSecurity

Site Links

Useful Articles

Login