Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am seeing strange behavior on an Apache server. When a parameter is set twice in the URL (e.g., https://example.com/xxx/xxx.cgi?toto=1&toto=1), I get a 403 error from Apache.

I know mod_security is installed on this server, and I think that’s what’s causing the problem, but I can’t find the rule to disable it.

More examples:
?toto=1&toto=1 => 403
?toto=1&toto=2 => 403
?toto=1&titi=1 => OK

share|improve this question
Have you tried disabling mod_security? webhostingtalk.com/showthread.php?t=888019 –  coincoin Aug 8 '12 at 19:06
Don't you take a look at the error log? –  quanta Aug 9 '12 at 7:20

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.