On Wed, 07 May 2008 23:05:56 +0200 Richard Weickelt <weickric@xxxxxxxxxxxxx> wrote: > Shouldn't the URL above look like: > /repaint/lib/exe/indexer.php?id=start&1210159793" no. we're using xhtml. This means the & has to be encoded as &. Your browser will interpret that and use the correct URL. The mod_security rule above complains that there is no parameter name for the timestamp. Or that there is no value for the parameter named 1210159793. Whatever, it's a valid URL and this mod_security rule is stupid. > But what is the timestamp for? It seems not beeing used anywhere, > because in the url above it is recogniced as part of the ID and > filtered out. This timestamp makes 100% sure neither your browser nor any proxy will use a cache to access that URL. It's a common way to make an URL absolutely uncacheable. Ask your admin to fix the mod_security rule. Andi -- splitbrain.org