What is ModSecurity?

ModSecurity is a web application firewall that provides website protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.

It is used to block commonly known exploits against websites used by hackers and other malicious attacks (such as code injection or cross scripting attacks) by the use of matching regular expressions and rule sets.

To detect threats, the ModSecurity engine scans all the requests and relative responses which come to the web server (and which are sent from the server respectively), as per its set of rules. If the check succeeds, then the HTTP request is passed to the website content but if it fails, then it blocks the request.

More information on ModSecurity can be found here: https://www.modsecurity.org/about.html

ModSecurity is enabled on all Pay Monthly Hosting servers and accounts by default.

Sometimes, when carrying out administration tasks on your website such as a WordPress blog or a Joomla site, ModSecurity may be triggered and block the activity that you are trying to accomplish.

This is because ModSecurity matches the request you are making to one of the "banned" rules.

The best way to manage this is to disable ModSecurity for your website whilst you carry out your activity and then re-enable ModSecurity when you have finished.

The ModSecurity control icon can be found under the SECURITY section of your cPanel.


ModSecurity in cPanel
  • 0 Users Found This Useful
Was this answer helpful?

Related Articles

What is Website Builder?

Website Builder is a quick and easy way to build a website with no technical knowledge in just...

What is CloudFlare?

CloudFlare is one of the worlds leading Content Delivery Networks (CDN). CloudFlare dramatically...

How do I change my version of PHP?

PHP is a widely-used, open source scripting language that is especially suited for website...

What is Lets Encrypt SSL?

Lets Encrypt is an automated SSL certificate that can be used to protect both your website and...

Where are my Apache error logs?

Your Apache server error logs are located in your cPanel for your hosting account under the...

Powered by WHMCompleteSolution