standard setting for "mod_security"

[andrywang]

Hi,

 

I am facing problem having error 404 on save after editing a product. after I read some topic, several also facing problem regarding "mod_security".

 

the answer is to disabled the "mod_security" but this make the website vulnerable.

 

Is there a "mod_security" standard setting for prestashop that could be used, if I still want to proceed using the "mod_security" ?

 

thanks

[oka]

Hello.

 

You should deactivate mod_security only in BO. (admin folder, because this folder is "hidden" and you should protect it with simple username and password (htpasswd from Apache) so no one can get in)

 

The rest of the site should be protected with mod_security.

 

Regards.

[ukbaz]

Am thinking of installing mod_security on server - but think it might interfere with friendly URL's has anyone got a standard list of settings for Mod_sec so that it does not interfere with a live site? thanks, Baz