I was wondering if anyone got ImageAPI and ImageMagick to work with mod_security enabled server?

I am seeing this error when mod_security load with Apache server :

--------
# ImageMagick command: start "window title" /D'/usr/local/www/campaign' /B '/usr/local/www/php/bin/convert' 'files/pl/logo/logo.gif' -resize 170x150! -crop 150x150+10+0! -quality '75' 'files/pl/imagecache/test/logo/logo.gif'
# ImageMagick output:

ImageMagick reported an error: sh: start: command not found.
--------

If it is possible please guide me how can I configure mod_security config files to solve the problem.

Thanks in advance.

Comments

KimaJako’s picture

Title: ImageAPI with Imagemagick doesn`t work with mod_security » ImageAPI and Imagemagick doesn`t work with mod_security
drewish’s picture

are you using mod_security on windows? if not (and the sh: makes me thing not) i'm guessing it's confusing the os detection and so the imagemagick toolkit is trying to run the windows invocation code.

KimaJako’s picture

I`m using modsecurity_2.5.7 with Apache: httpd-2.2.11 on Linux CentOS server, but I set :

SecServerSignature "Microsoft-IIS/6.0"

in modsecurity config file.

KimaJako’s picture

Status: Active » Fixed

Ok! you are right, I changed the SecServerSignature to something else and every things work properly.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.