Within the dolphin installation instructions there is a line:
"If some security module is installed on the server (such as mod_security for Apache), it should be able to be disabled or set up for specific folders".
So I just installed mod security and by adding the following to the Default VirtualHost allows upload of audios etc. But without it the uploader stalls.
<IfModule security2_module>
SecRuleEngine Off
</IfModule>
I guess this is a good thing and shows that mod security is doing its job.
However, rather than have the whole site unprotected by mod security, are there specific folders I can allow so dolphin functions yet most of the site remains protected by mod security.
I am new to mod security and have the defaults plus a few extra changes applied and of course will learn more in the future as I build etc.
But for now I would like to protect as much as possible.
Any ideas about specific folders to protect would be helpful.
Thanks.