{"id":5898,"date":"2020-11-12T07:01:43","date_gmt":"2020-11-12T07:01:43","guid":{"rendered":"https:\/\/litextension.com\/faq\/docs\/unwanted-errors-fix\/how-to-disable-mod_security\/"},"modified":"2024-12-31T02:13:47","modified_gmt":"2024-12-31T02:13:47","slug":"how-to-disable-mod_security","status":"publish","type":"docs","link":"https:\/\/litextension.com\/faq\/docs\/migration-process\/migration-preparation\/how-to-disable-mod_security\/","title":{"rendered":"How to disable ModSecurity?"},"content":{"rendered":"\n<p>ModSecurity is an open-source web application firewall (WAF) supported by web servers like Apache, Nginx, and IIS. It helps protect against web-based attacks, which now account for over 70% of all cyberattacks. However, in some cases, ModSecurity rules may interfere with website operations, requiring it to be disabled temporarily or for specific domains.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Disable ModSecurity in cPanel<\/strong><\/h2>\n\n\n\n<p>If ModSecurity rules are causing issues and you cannot modify the rules, you can disable it directly in cPanel:<\/p>\n\n\n\n<p>1. Log into your cPanel account.<\/p>\n\n\n\n<p>2. Navigate to the &#8220;Security&#8221; section.<\/p>\n\n\n\n<ol class=\"wp-block-list\"><\/ol>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1431\" height=\"865\" src=\"https:\/\/litextension.com\/faq\/wp-content\/uploads\/2020\/11\/disable-mod_security-1.png\" alt=\"\" class=\"wp-image-5899\" srcset=\"https:\/\/litextension.com\/faq\/wp-content\/uploads\/2020\/11\/disable-mod_security-1.png 1431w, https:\/\/litextension.com\/faq\/wp-content\/uploads\/2020\/11\/disable-mod_security-1-300x181.png 300w, https:\/\/litextension.com\/faq\/wp-content\/uploads\/2020\/11\/disable-mod_security-1-768x464.png 768w, https:\/\/litextension.com\/faq\/wp-content\/uploads\/2020\/11\/disable-mod_security-1-1024x619.png 1024w\" sizes=\"auto, (max-width: 1431px) 100vw, 1431px\" \/><\/figure>\n\n\n\n<p>3. Click on &#8220;ModSecurity&#8221;.<\/p>\n\n\n\n<p>4. To disable ModSecurity for all domains, click the &#8220;Disable&#8221; button. A confirmation message will appear stating: \u201c<em>ModSecurity is disabled for all of your domains.<\/em>\u201d<\/p>\n\n\n\n<p>5. You can also disable ModSecurity for a particular domain. Select a specific domain and click the &#8220;Off&#8221; button to disable.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"953\" height=\"846\" src=\"https:\/\/litextension.com\/faq\/wp-content\/uploads\/2020\/11\/Enable-ModSecurity.png\" alt=\"\" class=\"wp-image-7046\" srcset=\"https:\/\/litextension.com\/faq\/wp-content\/uploads\/2020\/11\/Enable-ModSecurity.png 953w, https:\/\/litextension.com\/faq\/wp-content\/uploads\/2020\/11\/Enable-ModSecurity-300x266.png 300w, https:\/\/litextension.com\/faq\/wp-content\/uploads\/2020\/11\/Enable-ModSecurity-768x682.png 768w\" sizes=\"auto, (max-width: 953px) 100vw, 953px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Disable ModSecurity Using .htaccess<\/strong><\/h2>\n\n\n\n<p>If you prefer or need to disable ModSecurity via the <code>.htaccess<\/code> file, follow these steps:<\/p>\n\n\n\n<p>1. Create or edit a <code>.htaccess<\/code> file in the root directory of your website.<\/p>\n\n\n\n<p>2. Add the following code to disable ModSecurity: <\/p>\n\n\n\n<ol class=\"wp-block-list\"><\/ol>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;IfModule mod_security.c> \n\nSecFilterEngine Off\n\nSecFilterScanPOST Off\n\n&lt;\/IfModule><\/code><\/pre>\n\n\n\n<p>3. Save the file and upload it to your website\u2019s root directory.<\/p>\n\n\n\n<p>In case you have any other questions, please reach out to us via:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a target=\"\" rel=\"\">Ticket system<\/a> (highly recommended)<\/li>\n\n\n\n<li>Email us at <a target=\"\" rel=\"\">contact@litextension.com<\/a><\/li>\n<\/ul>\n","protected":false},"author":1,"featured_media":0,"parent":6184,"menu_order":11,"comment_status":"open","ping_status":"closed","template":"","meta":{"footnotes":""},"doc_tag":[],"class_list":["post-5898","docs","type-docs","status-publish","hentry"],"comment_count":0,"_links":{"self":[{"href":"https:\/\/litextension.com\/faq\/wp-json\/wp\/v2\/docs\/5898","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/litextension.com\/faq\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/litextension.com\/faq\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/litextension.com\/faq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/litextension.com\/faq\/wp-json\/wp\/v2\/comments?post=5898"}],"version-history":[{"count":11,"href":"https:\/\/litextension.com\/faq\/wp-json\/wp\/v2\/docs\/5898\/revisions"}],"predecessor-version":[{"id":7047,"href":"https:\/\/litextension.com\/faq\/wp-json\/wp\/v2\/docs\/5898\/revisions\/7047"}],"up":[{"embeddable":true,"href":"https:\/\/litextension.com\/faq\/wp-json\/wp\/v2\/docs\/6184"}],"next":[{"title":"What is Basic Authentication?","link":"https:\/\/litextension.com\/faq\/docs\/migration-process\/migration-preparation\/what-is-basic-authentication\/","href":"https:\/\/litextension.com\/faq\/wp-json\/wp\/v2\/docs\/5746"}],"prev":[{"title":"What is root folder and how to find it?","link":"https:\/\/litextension.com\/faq\/docs\/migration-process\/migration-preparation\/root-folder\/","href":"https:\/\/litextension.com\/faq\/wp-json\/wp\/v2\/docs\/4481"}],"wp:attachment":[{"href":"https:\/\/litextension.com\/faq\/wp-json\/wp\/v2\/media?parent=5898"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/litextension.com\/faq\/wp-json\/wp\/v2\/doc_tag?post=5898"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}