Mod_security and cPanel temp URL’s

If you have a customer that is getting ModSecurity errors when accessing parts of their site using a temp URL like this:

http://host.servername.com/~theirusername

You may want to whitelist the rule that is blocking the page, however you can not just whitelist this on the users account itself.  You need to make sure the whitelist happens for the entire server.  The reason for this, is that when accessing the temp URL, you are accessing apache as the servers global user, not the customers.  So any whitelisting you do on the customer will not take affect.

One of the easiest ways to whitelist particular rules is to install CMC on your server.  Once installed, go into your WHM, click on ConfigServer ModSec Control, then under ModSecurity rule ID list: type in the rule ID number that you need whitelisted and click on save global whitelist.