Hocam bu konu ile ilgili örnek paylaşım veya makale varmıdır



O konu hakkında hiç bir fikrim yok var olan ürünleri güncelle dediğimiz zaman hiçbir problem yok,
Yeni ürünleri çekmeye geldimi 500 e düşüyor sunucuyu aldıgım yer error_log dosyasında herhangi bir hata kaydı olmadığını söyledi,
Öyle veya böyle çözülcek hayırlısı hocam



Apache yerine Nginx kurulsa farkeden birşey olur mu



Bu log dosyasındaki bilgiler benim sorunum ile alakalımı arkadaşlar

--47f3af23-A--
[17/Jul/2019:11:10:06 +0300] XS7X3j6ysKCobx7-oBMFFwAAAIA 31.145.179.6 2772 37.247.108.77 80
--47f3af23-B--
GET /index.php?SELECT%20*%20FROM%20mysql.users HTTP/1.1
Host: 37.247.108.77
Connection: keep-alive
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3
Accept-Encoding: gzip, deflate
Accept-Language: tr-TR,tr;q=0.9,en-US;q=0.8,en;q=0.7
Cookie: _firstImpression=true; cwpsrv-57d267e78298f500b6f1e6ee7bb58075=f8s9ba0jjsgscs0tj 23ump56o7

--47f3af23-F--
HTTP/1.1 403 Forbidden
Content-Length: 218
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

--47f3af23-E--

--47f3af23-H--
Message: Access denied with code 403 (phase 2). Pattern match "(?i?:\b(??:s(?:ys\.(?:user_(??:t(?:ab(?:_co lumn|le)|rigger)|object|view)s|c(?nstraints|atal og))|all_tables|tab)|elect\b.{0,40}\b(?:substring| users?|ascii))|m(?:sys(??:queri|ac)e|relationshi p|column|object)s|ysql\.(db|user))|c(?nstraint ..." at ARGS_NAMES:SELECT * FROM mysql.users. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "116"] [id "950007"] [rev "2"] [msg "Blind SQL Injection Attack"] [data "Matched Data: SELECT * FROM mysql.users found within ARGS_NAMES:SELECT * FROM mysql.users: SELECT * FROM mysql.users"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"]
Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client %s] ModSecurity: %s%s [uri "%s"]%s
Action: Intercepted (phase 2)
Stopwatch: 1563351006043399 3644 (- - -)
Stopwatch2: 1563351006043399 3644; combined=2182, p1=1553, p2=603, p3=0, p4=0, p5=26, sr=1361, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/); OWASP_CRS/2.2.9.
Server: Apache/2.4.39 (Unix) OpenSSL/1.0.2k-fips
Engine-Mode: "ENABLED"

--47f3af23-Z--