Cai dat webserver va mod_security
0.yum install epel-release-6-8 ------->DAY LA BUOC QUAN TRONG NHAT !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
1.yum install httpd
2.yum install mysql-server
3.yum install php
4.yum install phpmyadmin
5.Cau hinh cac dich vu va restart dich vu
5.1.Yum install mod_security --->cp mod_security.conf vao vi tri /etc/httpd/conf/
5.2.Chinh sua file cau hinh : nano /etc/httpd/conf.d/mod_security.conf

6.Cau hinh phpmyadmin
7.cau hinh mysqld
8.Cau hinh MOD_SECURITY

gom 4 phase : 
phase1(uri_Request) client -----request to Servre
phase2(uri_response) server ----respone to client
phase3(request_body(form))
phase4(reponse_body(form))

 SecRule REQUEST_URI "r57" "id:123,t:none,t:lowercase,deny,log,phase:2,status:406"
 SecRule REQUEST_URI "c99" "id:123,t:none,t:lowercase,deny,log,phase:2,status:406"
 SecRule REQUEST_URI "union|schema|table_name|column_name" "id:222,t:none,t:lowercase,deny,log,phase:2,stutus:404"
 SecRule REPONSE_BODY "ls -lia" "id:333,t:none,t:lowercase,deny,log,phase:4,status:405"

<Directory /var/www/site/web2/No>
SecRuleEngine Off
</Directory>

<LocationMatch location/abc>
    SecRuleEngine Off
</LocationMatch>
 


c99 : Chong List file ????? (reponse for phase2))----????

https://www.youtube.com/watch?v=vH15Yct-wxY ---->r57 upload