ModSecurity File Upload Error With SecRequestBodyNoFilesLimit

Are you facing ModSecurity File Upload Error With SecRequestBodyNoFilesLimit? We can help you in resolving it.

When the ModSecurity parameter SecRequestBodyNoFilesLimit has reached the limit, you will not be able to upload any files. As a result, it will throw some errors.

Here at Bobcares, we have seen several such ModSecurity-related errors as part of our Server Management Services for web hosts, cPanel users, and online service providers.

Today, we will take a look at how our Support Engineers resolve this error message relating to ModSecurity.

How to resolve ModSecurity File Upload Error With SecRequestBodyNoFilesLimit

Recently, one of our customers approached us telling us that he was not able to upload files to the Plesk server. Here received the below error message when trying to upload the files.

Request Entity Too Large
The requested resource
/upload-a-file/
does not allow request data with POST requests, or the amount of data provided in the request exceeds the capacity limit.

Also, the following error was present in /var/www/vhosts/example.com/logs/error_log file:

[:error] [pid 21701] [client 2xx.0.1xx.2] ModSecurity: Request body no files data length is larger than the configured limit (1048576).. Deny with code (413) [hostname "www.example.com"] [uri "/wp-admin/admin-ajax.php"]

This happens when the WAF_SECREQUESTBODYNOFILESLIMIT parameter value reached its limit.

Now let us see how our Support Engineers resolve this error message for our customer.

In order to resolve the error, we first, we log into the server via SSH.

Next, we open /etc/asl/config file. For that, we use the vi text editor.

Here, in the file, we increase the value for the WAF_SECREQUESTBODYNOFILESLIMIT directive, for example to the value as below:

WAF_SECREQUESTBODYNOFILESLIMIT "10000000"

Then we save the file and exit from it.

Finally, we execute the command below to update the rulesets:

# for i in daily weekly monthly; do /usr/local/psa/bin/sw-engine-pleskrun /usr/local/psa/admin/plib/DailyMaintainance/script.php -f UpdateModSecurityRuleSet --period "${i}"; done

[Need any further assistance in fixing ModSecurity errors? – We are here to help you.]

Conclusion

In short, this upload problem arises when the ModSecurity parameter SecRequestBodyNoFilesLimit has reached the limit. Today, we saw how our Support Engineers resolve this ModSecurity error.