How to Disable ModSecurity for Troubleshooting Print

How to Disable ModSecurity for Troubleshooting

If you’ve encountered a 500 Internal Server Error while posting in WordPress, XenForo, or another CMS, the cause may not be your content - it might be your server’s security configuration. At Vivint Host, we’ve helped countless clients resolve this issue by pinpointing the real culprit: ModSecurity.

Why Does ModSecurity Cause Errors?

ModSecurity works by scanning requests to your website for suspicious activity. However, it can mistakenly flag harmless actions, such as:

• Pasting formatted text (from Microsoft Word, Google Docs, etc.).
• Certain plugin operations (like ManageWP Worker).
• Form submissions with special characters.

If you’re seeing 403 Forbidden or 500 errors, temporarily disabling ModSecurity can help confirm if it’s the issue.

How to Disable ModSecurity in cPanel

Method 1: Disable for a Single Domain

1. Log in to cPanel.
2. Search for "ModSecurity" in the search bar.
3. Click the ModSecurity icon.

Find your domain and toggle the switch to "Off."

Method 2: Disable for Entire cPanel Account

If multiple domains are affected, you can disable ModSecurity for all of them:

1. Go to ModSecurity in cPanel.

Click "Disable" for the entire account.

For VPS/Dedicated Server Users: Disable Specific Rules

If you have WHM access, you can disable only the problematic rule instead of turning off ModSecurity completely:

1. Log in to WebHost Manager (WHM).
2. Go to ModSecurity Tools.
3. Check the active rules and disable the one causing issues.

Important: If multiple rules are triggering errors, disabling ModSecurity entirely might be faster-but this weakens your site’s security.

What to Do After Disabling ModSecurity

Since ModSecurity is a critical security layer, leaving it off permanently is not safe. Instead:

• Contact Vivint Host Support: We can check server logs, find the exact rule causing problems, and whitelist it-so your site stays secure.
• Update All Software: Outdated CMS, plugins, and themes are the #1 cause of hacks. Always install the latest security patches.
• Use Strong Passwords: Weak logins make your site an easy target. Use a mix of uppercase, lowercase, numbers, and symbols.

Need Help? Vivint Host’s 24/7 Support Has You Covered

If you’re not sure how to safely disable ModSecurity or need help identifying the problematic rule, our experts are here 24/7. We’ll ensure your site stays fast, secure, and error-free.

Contact Support Now – Let’s fix this together!