Messages

1

Mod_Security / Re: OWASP CRS v4.15.0 Just Release

« on: September 04, 2025, 12:46:28 PM »

Mod_Security should not overwrite anything, it only does that when you change a setting like ModSec Rules Profile or Rules ENgine.

It is not mod_security

I mentioned before, it is the CWP Security Daemon that is checking the integrity of the files and overwrites known system files that have unknown edits.

My host (InMotion Hosting) confirmed that to me. Maybe it's their custom security module. I don't know.

The only thing I know is that on a regular basis, my mod_security.conf file would get overwritten with the default "Include:" path creating a chaos on my websites.

I hope this helps.

2

Addons / Re: Redis server upgrade

« on: September 03, 2025, 07:32:54 AM »

For anyone interested, I'm going to attempt to remove the current Redis Server from my CWP Server and do a clean install of the latest one Redis Server 8.0.X

According to Gemini AI and various online reviews, it will offer a dramatic improvement on performance.

3

Mod_Security / Re: OWASP CRS v4.15.0 Just Release

« on: September 03, 2025, 07:30:56 AM »

Hi, Starburst

You should have any customized .conf for OWASP in one of their respected folders, so there is a very low change of them being overwritten:

Code: [Select]

/usr/local/apache/modsecurity-rules/custom-rules/startup/*.conf
/usr/local/apache/modsecurity-rules/custom-rules/before/*.conf
/usr/local/apache/modsecurity-rules/custom-rules/after/*.conf

Of course I have those files under the /custom/ path however I'm referring to the "Include" file path inside the mod_security.conf file which points to the new OWASP ruleset.

This is the file that is getting overwritten by the CWP security daemon.

Code: [Select]

/usr/local/apache/conf.d/mod_security.conf
I hope this helps.

4

Mod_Security / Re: OWASP CRS v4.15.0 Just Release

« on: September 03, 2025, 07:26:05 AM »

Hi, Overseer

My solution to that was to also strictly enumerate the file the GUI calls for in /usr/local/apache/modsecurity-owasp-old/owasp.conf:

Code: [Select]

Include /usr/local/apache/modsecurity-owasp-old/global_disabled_rules.conf

How are you achieving this?

Thank you

5

Mod_Security / Re: OWASP CRS v4.15.0 Just Release

« on: September 01, 2025, 05:30:06 AM »

Someone has to include 2 very critical details on these guides:

1) the CWP admin dashboard "Global Disabled Rules" file is NOT the same with the one that our customized mod_security is currently using.

No edit on that file will work. The user has to add/remove rules on the new global_disabled.conf under the newly created folder.


2) the mod_security.conf file is getting overwritten occasionally by the CWP Security daemon - replacing the custom OWASP ruleset path with the default path causing chaos on the server.

My solution was to make it immutable with

Code: [Select]

sudo chattr -i /usr/local/apache/conf.d/mod_security.conf but then the user MUST remember to remove this flag for any future update/edit.

I hope this helps.

Feel free to let me know if I missed something or share this with AlphaGNU and Starburst.

6

Addons / Re: Redis server upgrade

« on: August 25, 2025, 02:37:48 PM »

If you're using wp, there's plugin called to wp super page cache that integrating cloudflare page everything cache. It's super fast as it'll convert Your wp to the static html page.

Very interesting indeed. I didn't know about this.

Thank you very much

7

Addons / Re: Redis server upgrade

« on: August 21, 2025, 05:16:53 AM »

Best best is using Cloudflare's CDN and Cache.

Even the highest ranking WP Cache uses and integrates with it.

Thank you StarBurst

Already using CloudFlare Free/PRO on all of our hosted websites + the official CloudFlare WP Plugin + Nginx Helper + Redis Cache + WP-Rocket for some of our websites.

It's a crazy performance based stack 

8

Addons / Re: Redis server upgrade

« on: August 21, 2025, 05:14:51 AM »

Which version of PHP? This guide is older, but still works under AlmaLinux 8

Thank you Overseer

NGINX > Apache > PHP-FPM (forced) 8.3.12

I already have Redis Server installed, it is just the default version IMH tends to install.

I'm already using the WP-SALT Keys, custom wp-config.php directives and Redis Cache plugin, etc on all of our WordPress websites.

I've also customized the Redis .conf file for performance reasons.

What I'm looking into is how to upgrade Redis server from its current (2018, I think) version to a newer one closer to Redis 8.X.X

I followed this guide here:
https://redis.io/docs/latest/operate/oss_and_stack/install/install-stack/rpm/

But the repo won't show any update at all.

That's why GEMINI AI suggests to me to completely remove Redis and do a clean-install.

However I'm concerned about incompatibility issues on a production server.

Did anyone tried that before?

9

Addons / Re: WordPress Management Tool (i.e. WP-Toolkit)

« on: August 20, 2025, 05:12:22 AM »

Try it and see if Softaculous works for you.

Just wanted to follow-up on this.

I've got the Softaculous Premium license from our host and indeed it has the same functionality with WP-Toolkit PRO or even better.

They did a very good work on the Premium license.

10

Addons / Redis server upgrade

« on: August 20, 2025, 05:11:06 AM »

Hello there

(feel free to move this topic to another section if it is incorrectly placed)

I'm currently using

Code: [Select]

redis-server --version
Redis server v=5.0.3 sha=00000000:0 malloc=jemalloc-5.1.0 bits=64 build=14b81d825631ff0c
I've configured the custom repository following Redis documentation, I've cleared DNF cache, and tried everything.

However, DNF will not show me any available update even though Redis current self-hosted version is at 8.X.X

How can I upgrade the Redis server to a newer version?

I'm on AlmaLinux 8.

Is there any guide?

After trying every possible method, Gemini AI suggests that I would need to manually download the files and compile the new version locally, delete the old version and apply the new version - with all the risks of incompatibility that entails.

Thank you very much.

11

Nginx / Re: Brotli Module update version

« on: August 20, 2025, 05:01:08 AM »

FYI for anyone looking to enable Brotli compression on Nginx 1.28v ++

This guide worked for me:
https://www.alphagnu.com/topic/10-enable-brotli-compression-on-nginx-cwp-and-on-linux-os-for-official-nginx/

I followed the last thread by AmarBunty on May 23.

12

Nginx / Re: Brotli Module update version

« on: August 12, 2025, 03:24:24 AM »

Already on Gzip.

Thank you Overseer

Let's hope we will get an update on that soon.

13

Nginx / Re: Brotli Module update version

« on: August 11, 2025, 11:55:52 AM »

Thank you @overseer

Unfortunately nope and Sandeep mentions in his latest forum post that he needs to update the guide because it is old.

I'm currently using Nginx v1.28 (stable repo) on my CWP PRO - AlmaLinux 8.

I tried both sources, and both have the same version incompatibility error.

I think - if the Brotli Module is abandoned - then we need to do a custom mod over the existing Brotli Module files to make them compatible with newer Nginx versions.

Any suggestions?

Thanks again.

14

Nginx / Brotli Module update version

« on: August 10, 2025, 02:15:23 PM »

Hi all

I'm using NGINX version 1.28 on my CWP

I'm trying to install the Brotli modules and my file source has outdated files:
http://dl1.centos-webpanel.com/files/nginx/modules/nginx-brotli-modules.zip

Running

Code: [Select]

nginx -t I'm getting this message:

Code: [Select]

nginx: [emerg] module "/etc/nginx/modules/ngx_http_brotli_filter_module.so" version 1016000 instead of 1028000 in /etc/nginx/nginx.conf:1

Code: [Select]

nginx: configuration file /etc/nginx/nginx.conf test failed
Does anyone have the source of the updated Brotli version?

The Github project seems abandoned too:
https://github.com/google/ngx_brotli

Any suggestions?

Thank you

15

Mod_Security / Re: WordPress or WooCommerce, have a conflict with the OWASP CRS v4.16.0

« on: July 23, 2025, 04:43:26 AM »

Thank you very much.

I've identified some extra ones since I updated to 4.16.0

Code: [Select]

## Wordpress ##
SecRuleRemoveById 981242
SecRuleRemoveById 981246
SecRuleRemoveById 981243
SecRuleRemoveById 980170
SecRuleRemoveById 981172
SecRuleRemoveById 981319
SecRuleRemoveById 981260
SecRuleRemoveById 973308
SecRuleRemoveById 973335
SecRuleRemoveById 973347
SecRuleRemoveById 973334
SecRuleRemoveById 959073
SecRuleRemoveById 958030
SecRuleRemoveById 950007
SecRuleRemoveById 942420
SecRuleRemoveById 942290
SecRuleRemoveById 949110