Setting Goals with exact URL denied with 403 as "possible RFI attempt"

Support & Bugs
1

Hi,
I’m using Piwik on a shared hosting server but i managed to have it work very good.

I defined some goals and had no issues when using URL ‘contains’ but when i try to define a goal with an ‘exact’ URL it just keeps hanging and the “Loading data” ajax request doesn’t stop.

When checking the error logs on my server it shows following incidents for each time i tried:

ModSecurity: Access denied with code 403 (phase 2). Match of "beginsWith %{request_headers.host}" against "TX:1" required. [file "/etc/apache2/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "207"] [id "NOT SHURE IF SENSITIVE DATA"] [rev "294"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: URL detected as argument, possible RFI attempt detected"] [data "%TX:1,TX:1"] [severity "CRITICAL"] [hostname "tutnichtszursache.com"] [uri "/analytics/piwik/index.php"] [unique_id "VwfuFn8AAQEAAAqZZLMAAAAJ"]

Does anybody know what causes this and how to get rid of it? I guess i have to make any changes to the server setting but as it is a shared hosting server i can’t define anything in realtion to php.ini or similar just basics…

Cany please someone advise?

Thanks and regards

2

See: How do I configure Piwik when mod_security (or CA SiteMinder) is enabled? - Analytics Platform - Piwik

3

Thanks for the hint matthieu! I can edit the ModSecurity setting in the Plesk Panel but as i really don’t know about what to do, can you or someone please assist what i should enter to have piwik whitelisted from ModSecurity? Is there a tutorial or any instructions what i should take from the log to have insert of the ModSecurity fields “ID” or “Tags” for the specific Piwik URL?