Is there a way to dis-able mod-security for all websites? except one? i have more than 500 websites hosted, only want to turn it on for one website, which is having attacks on it.
Well I suppose it is possible if you enable the configuration for mod security
either in .htaccess or in the virtual host apache configuration for that particular domain using something like this :
<IfModule mod_security2.c> SecRuleEngine On ...... (any other directives you might want to override from the defaul conf) </IfModule>
/etc/httpd/conf.d/mod_security.conf, or wherever the defaul config is stored, set
SecRuleEngine Off but leave the other directives in place.