I've been setting up a new server and needed to add a few modsec exceptions for an oscommerce derivative..
I've only just discovered that CWP, in their wisdom have decided to disable quite a few modsec rules by default.
########################################
## Removed Rules for Joomla, WordPress and Drupal CMSs ##
########################################
## Joomla ##
SecRuleRemoveById 960024
SecRuleRemoveById 950120
SecRuleRemoveById 981173
SecRuleRemoveById 950901
SecRuleRemoveById 981257
SecRuleRemoveById 981245
SecRuleRemoveById 973338
SecRuleRemoveById 973300
SecRuleRemoveById 973304
SecRuleRemoveById 973333
SecRuleRemoveById 973333
## Wordpress ##
SecRuleRemoveById 981242
SecRuleRemoveById 981246
SecRuleRemoveById 981243
SecRuleRemoveById 959073
SecRuleRemoveById 958030
## Drupal ##
SecRuleRemoveById 981231
## Removed rules for the webftp_simple ##
SecRuleRemoveById 950922
SecRuleRemoveById 981000
SecRuleRemoveById 950109
These should NOT be disabled by default, as not everyone installs all these applications.
![Shocked :o](https://forum.centos-webpanel.com/Smileys/default/shocked.gif)
You are defeating the principle purpose of modsec!
If you must, then why not include a couple of /scripts to install these exceptions, should the need arise?