Summary ModSecurity:-
is a powerful web application firewall (WAF) that protects your site from various attacks, such as SQL injection and cross-site scripting (XSS). While it is essential for security, it can sometimes be overprotective and block legitimate actions (like saving a post in WordPress or updating a plugin). Knowing how to manage it allows you to troubleshoot these "False Positives" without compromising your entire server's safety.
Steps to Manage ModSecurity:
Log in to your cPanel.
Scroll down to the Security section and click on ModSecurity.
On this page, you will see a list of your domains and their current status.
To Disable for a Specific Domain: Simply click the Off button next to that domain.
To Enable: Click the On button.
To Disable Globally: Click the Disable All button at the top (not recommended unless for testing).
Tip for Thamara Users:
Only disable ModSecurity temporarily to test if it is the cause of a specific error. If your site works after disabling it, you should contact our support team or your developer to "whitelist" the specific rule that was triggered. Never leave it off permanently, as it is your first line of defense against hackers.