IIRC the 'most recent' version of mod_sec actually doesn't let you override the damn thing with .htaccess! (Liquidweb will go in and add your domain or app to a whitelist if you're on shared hosting and you run into this problem BTW).So, if the host allows mod_security to be disabled via .htaccess, then that's acceptable. If they have any sort of restrictions forcing you to use mod_security, then that's a hosting service deal-breaker.


LinkBack URL
About LinkBacks
Reply With Quote