htaccess and mod_security

[omarfilip]

Had a weird one today: Set up a Joomla article that had "mechanical-worksheet" in the URL, like this:

http://something.com/worksheets/mechanical-worksheet

but I kept getting a 406 Not Acceptable error. A bit of searching, and it turns out that mod_security is matching the "mech" pattern and preventing the page from being served.

Got around the issue by changing the URL to ...mcncl-worksheet, but I'm curious to learn if this can be fixed more elegantly with .htaccess? I'd rather not change mod_security to allow "mech."

[Alexander]

You can turn off mod_security if the .htaccess file for this folder by adding the following lines:

SecFilterEngine Off
SecFilterScanPOST Off

[Matt]

Or if you have a dedicated server you can simply edit the mod sec config file and add or remove rules as you need.