The rules we are using currently come from Comodo, and are a public set of rules used by a large number of people worldwide. Think of it as a firewall for your website. Things like the browser they are using, the size of their request, the filename they are requesting and so on are all checked against these rules, and if anything abnormal or dangerous is detected, the request is blocked before it is processed by PHP or Litespeed. When a request comes in to the server from a visitor trying to access your website, the request data and other pieces of information they send are scanned by mod_security for known attack signatures against a set of rules that we have saved server side.
Essentially it acts as a web application firewall and sits between the web request itself and the server. Mod_security is a server side module for Apache that allows us to scan web requests and apply filters based on a huge range of criteria.
0 kommentar(er)
