Masking your web server

There is a new feature available in the CVS, and it allows you to mask your web server and instruct ...

Read More

Changed name to Web Security Blog

I decided to change the name of this blog to "Web Security Blog". I figured that web security is ...

Read More

Output filtering now in CVS

The new output filtering functions are now in CVS. I implemented this feature for Apache 2 first ...

Read More

New action: pause

I have added a new action to the CVS, called "pause". It accepts one parameter, time in ...

Read More

Added Unicode encoding validation

I've just committed the Unicode validation feature to the CVS. It is a very good thing to have if ...

Read More

Selective Filtering

I've just added a new feature to mod_security (CVS, both versions) that allows you to achieve a ...

Read More

Fun with PHP CLI scripts

I've had quite a lot of "fun" with PHP CLI scripts the other day. As you perhaps know, there is an ...

Read More

Apache chrooting simplified

I've added a new (and experimental) feature to mod_security (CVS and Apache 1.x only at the moment) ...

Read More

URL decoding bug fixed

I just fixed a small bug in the URL decoding routine. Apparently, I forgot to add code to convert ...

Read More

Porting mod_security to Windows

With module functioning well on Unix-based platforms I decided to start with the Windows port. The ...

Read More