SecRuleRemoveById 932235
SecRuleRemoveById 911100

SecRule REQUEST_URI "@streq /api/v2/admin/protected/products" \
  "id:399002,phase:2,nolog,pass,\
   ctl:ruleRemoveById=920120,\
   ctl:ruleRemoveById=920121"

SecRule REQUEST_URI "@beginsWith /uploads/" \
    "id:1000,\
    phase:1,\
    pass,\
    nolog,\
    ctl:ruleEngine=Off"

SecRule IP:BANNED "@eq 1" \
  "id:100000,phase:1,deny,status:403,log,\
   msg:'IP is banned'"

SecRule IP:REPUTATION_SCORE "@ge 100" \
  "id:100099,phase:1,deny,status:403,log,\
   msg:'Critical reputation score',\
   setvar:'ip.blocked=1',expirevar:'ip.blocked=86400'"

SecRule TX:SQL_INJECTION_SCORE "@ge 5" \
  "id:100001,phase:2,deny,status:403,log,\
   msg:'SQL Injection detected',\
   setvar:'ip.banned=1',expirevar:'ip.banned=172800'"

SecRule TX:XSS_SCORE "@ge 5" \
  "id:100010,phase:2,deny,status:403,log,\
   msg:'XSS detected',\
   setvar:'ip.banned=1',expirevar:'ip.banned=172800'"

SecRule TX:RCE_SCORE "@ge 5" \
  "id:100020,phase:2,deny,status:403,log,\
   msg:'RCE detected',\
   setvar:'ip.banned=1',expirevar:'ip.banned=259200'"

SecRule TX:LFI_SCORE "@ge 5" \
  "id:100030,phase:2,deny,status:403,log,\
   msg:'LFI detected',\
   setvar:'ip.banned=1',expirevar:'ip.banned=172800'"

SecRule TX:INBOUND_ANOMALY_SCORE "@ge 20" \
  "id:100060,phase:2,deny,status:403,log,\
   msg:'Critical anomaly score',\
   setvar:'ip.banned=1',expirevar:'ip.banned=172800'"

SecRule REQUEST_URI "@streq /api/v1/panier/remove" \
  "id:399010,phase:1,nolog,pass,\
   ctl:ruleRemoveById=911100,ctl:ruleRemoveById=920350"

SecRule REQUEST_URI "@streq /api/v1/panier/clear" \
  "id:399011,phase:1,nolog,pass,\
   ctl:ruleRemoveById=911100,ctl:ruleRemoveById=920350"

SecRule REQUEST_URI "@streq /api/v2/admin/protected/products" \
  "id:399001,phase:2,nolog,pass,\
   ctl:ruleRemoveById=932235"

SecAction \
  "id:400161,phase:1,nolog,pass,\
   setvar:'ip.request_window_1sec=+1',\
   expirevar:'ip.request_window_1sec=1'"

SecRule IP:REQUEST_WINDOW_1SEC "@gt 20" \
  "id:400160,phase:1,deny,status:429,log,\
   msg:'Too many requests'"

SecRule IP:REPUTATION_SCORE "@ge 100" \
  "id:409999,phase:1,deny,status:403,log,\
   msg:'Critical reputation score',\
   setvar:'ip.blocked=1',expirevar:'ip.blocked=86400'"