[wp-trac] [WordPress Trac] #10551: wp_die() triggers block when using ModSecurity Core Rules

[WordPress Trac]

#10551: wp_die() triggers block when using ModSecurity Core Rules
--------------------------+-------------------------------------------------
 Reporter:  cstrosser     |       Owner:  westi            
     Type:  defect (bug)  |      Status:  accepted         
 Priority:  normal        |   Milestone:  3.0              
Component:  Security      |     Version:  2.8.3            
 Severity:  normal        |    Keywords:  reporter-feedback
--------------------------+-------------------------------------------------

Comment(by aaroncampbell):

 Please see also #12341 and #12529.  Here's why '''I''' don't like 500
 errors (pasted from #12529):
   Part of the reason I want to do this, is that I've noticed that
 automated systems trying to break a site seem to see a 500 error as a clue
 that they are getting closer to their goal. They seem to pound a lot
 harder on the scripts that return 500 errors, so I'd like to clean these
 up and only return them when they're actually appropriate.

 Currently wp_die is used 278 times in 86 files. However, we only specify
 an HTTP response code 3 times, which means 99% of these calls return a 500
 status code.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/10551#comment:8>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software