ModSecurity is a web application firewall. It checks the requests coming into your website and blocks common attacks, such as attempts to inject malicious code. It’s switched on for your domains by default.
We strongly recommend keeping ModSecurity switched on. Only turn it off briefly to check whether it’s causing a problem, and turn it back on straight afterwards.
When it might get in the way
Very occasionally, ModSecurity can mistake a genuine action for an attack – for example saving certain content in your website’s admin area, or a form that won’t submit. If this happens, turning it off briefly can confirm whether it’s the cause.
Turn ModSecurity on or off
First, log in to your Enhance panel – see how to login to Enhance Panel.
- Select Websites in the left side bar, then select the website you want to manage.
- Select Security in the menu along the top, then ModSecurity in the menu on the left (or scroll down).
- ModSecurity is set per domain. Use the switch next to the domain you want to change.
If ModSecurity is blocking something your website genuinely needs, don’t leave it switched off. Contact our support team with details of what you were doing and when, and we’ll look into it for you.
Need a hand? Please contact our support team and we’ll be happy to help.
