0

几天来,我一直在为这个问题头疼,但我完全没有想法。
我们正在将我们的网站移至新主机。
我们的网站在本地和旧主机上都可以使用。
没有对代码进行任何更改,但新主机在几次刷新后禁止了我们的 IP。
PHP/Apache 似乎没有给出错误。
最终,我们可以从我们的新主机获得这几行日志:

    [Mon Jun 17 07:46:45 2013] [error] [client 79.1.74.166] ModSecurity: Access denied with code 404 (phase 1). Match of "streq %{SESSION.IP_HASH}" against "TX:ip_hash" required. [file "/usr/local/apache/conf/modsec_rules/70_asl_csrf_experimental.conf"] [line "56"] [id "340206"] [msg "Warning - Sticky SessionID Data Changed - IP Address Mismatch."] [hostname "194.28.116.82"] [uri "/~aquaelit/serie.php"] [unique_id "Ub6ixcIcdFIAAGgWchQAAAAO"]
[Mon Jun 17 07:46:45 2013] [error] [client 79.1.74.166] ModSecurity: Access denied with code 404 (phase 1). Match of "streq %{SESSION.IP_HASH}" against "TX:ip_hash" required. [file "/usr/local/apache/conf/modsec_rules/70_asl_csrf_experimental.conf"] [line "56"] [id "340206"] [msg "Warning - Sticky SessionID Data Changed - IP Address Mismatch."] [hostname "194.28.116.82"] [uri "/~aquaelit/cms/prodotti/index.php"] [unique_id 
"Ub6ixcIcdFIAAFgPg3MAAAAD"]
[Mon Jun 17 07:46:48 2013] [error] [client 79.1.74.166] ModSecurity: Access denied with code 404 (phase 1). Match of "streq %{SESSION.IP_HASH}" against "TX:ip_hash" required. [file "/usr/local/apache/conf/modsec_rules/70_asl_csrf_experimental.conf"] [line "56"] [id "340206"] [msg "Warning - Sticky SessionID Data Changed - IP Address Mismatch."] [hostname "194.28.116.82"] [uri "/~aquaelit/cms/prodotti/sys_cpanel/images/bottombody.jpg"] [unique_id "Ub6iyMIcdFIAAHqUzh4AAAAA"]
[Mon Jun 17 07:46:48 2013] [error] [client 79.1.74.166] ModSecurity: Access denied with code 404 (phase 1). Match of "streq %{SESSION.IP_HASH}" against "TX:ip_hash" required. [file "/usr/local/apache/conf/modsec_rules/70_asl_csrf_experimental.conf"] [line "56"] [id "340206"] [msg "Warning - Sticky SessionID Data Changed - IP Address Mismatch."] [hostname "194.28.116.82"] [uri "/~aquaelit/sys_cpanel/images/bottombody.jpg"] [unique_id "Ub6iyMIcdFIAABEoS14AAAAH"]
[Mon Jun 17 07:46:50 2013] [error] [client 79.1.74.166] ModSecurity: Access denied with code 404 (phase 1). Match of "streq %{SESSION.IP_HASH}" against "TX:ip_hash" required. [file "/usr/local/apache/conf/modsec_rules/70_asl_csrf_experimental.conf"] [line "56"] [id "340206"] [msg "Warning - Sticky SessionID Data Changed - IP Address Mismatch."] [hostname "194.28.116.82"] [uri "/favicon.ico"] [unique_id "Ub6iysIcdFIAABEnSQoAAAAG"]

据我了解,看起来我们的 IP 在会话期间发生了变化。好吧,这根本不可能,所以我问你们中是否有人知道发生了什么。
到目前为止,我的网络搜索毫无意义,当我们每天收到一次来自支持的邮件时,我们感到很幸运,在我们再次更换主机之前,我在这里问。
提前致谢。

4

0 回答 0