Issue wordpress admin panel broken CSS because mod security

[kojot]

Hello,

I installed WP via Plesk Applications, but when I log in, page style is broken.



It is problem with mod security. I checked OWASP.
Can someone suggest me how to set mod security to avoid this problems, but stay safe?

 

[danami]

The OWASP ModSecurity core rules are the most secure but likely to cause false positives. If you aren't familiar with mod_security then I would recommend switching to Atomic's free ruleset. Otherwise you will have to look at the domains logs to see which rules are triggering. The Plesk interface allows you to disable certain rules for a domain under domain -> Web Application Firewall.

 

[serverpoint]

Hi,

The OWSAP rule set is very restrictive and thus blocks some functions such as file sharing, webmails and applications like WordPress.

Atomic ModSecurity Rule Set is recommended for production use. Please have a look at the below article.

-
https://docs.plesk.com/en-US/onyx/a...n/web-application-firewall-modsecurity.73383/
-

Regards,