Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : how dsiable CGI and Perl on mod_security

[mixmox]

hello
can i deny perl and cgi script with mod security ?
how?

[protocol1]

You could block .pl and .cgi file access with Mod Security. Something like:

SecRule REQUEST_URI "\.pl"

but would you not be better disabling in Apache conf.

[mixmox]

tnx protocol1
can i know the certain rule for blocking .pl with mod security?
im not friend with mod_security rule function

[protocol1]

I think this is what you need to add. Give it a test though.

SecRule REQUEST_URI "\.pl"
SecRule REQUEST_URI "\.cgi"

[mixmox]

you mean only add these lines on config file?