Problem in phpmyadmin with mod_security and comodo rule

arazit

Verified User
Joined
Aug 20, 2008
Messages
199
Hello,
I install mod_security for apache 2.4.x .
When I want to edit one table in phpmyadmin I get 403 error.
What to do?
Thank you
 
Hi

If you absolutely sure here is no malevolent requests during table editing such as 'DROP DATABASE;' this is false-positive (rule which restrain good application from running) :)
You have to disable this rule through CWAF plugin.

To do so first we should find which rule is responsible for this block.
1. Edit table in phpmyadmin to get error 403.
2. Look into mod_security audit log file (path to file set in plugin 'Security Engine' tab). Default path to file /var/log/httpd/modsec_audit.log
3. Find lines reporting about this error, something like:
Message: Access denied with code 403 (phase 2). Pattern.... [id "230220"][msg "COMODO WAF: SQL Attack"]....
All we need is Rule ID.
4. Now lets go into CWAF Plugin 'Catalog' tab. Put rule ID into field "Search By Rule ID" and press button.
This will find required rule.
5. To disable this rule set status to 'OFF' and press 'Implement' button.
6. Repeat steps if required.

This is it.
 
Back
Top