title: Apache LocationMatch wildcard for ModSecurity on wordpress site
body: <p>I'm have mod_security installed on an Ubuntu 14.04 Apache 2.4.7 running a WordPress site.  I have a handful of rules that I need to ignore, but I'm having trouble implementing some wildcard rules so that I don't have to specify each and every page..   </p>
  
  <p>What I have (in my site.conf file) is...</p>
  
  <pre><code>  &lt;LocationMatch "/wp-admin/post.php"&gt;
       SecRuleRemoveById 300016
    &lt;/LocationMatch&gt;
  
    &lt;LocationMatch "/wp-admin/nav-menus.php"&gt;
       SecRuleRemoveById 300016
    &lt;/LocationMatch&gt;
  
    &lt;LocationMatch "(/wp-admin/|/wp-login.php)"&gt;
       SecRuleRemoveById 950117
       SecRuleRemoveById 950005
       SecRuleRemovebyID 981173
       SecRuleRemovebyId 960024
    &lt;/LocationMatch&gt;
  
      &lt;LocationMatch "/wp-admin/load-scripts.php"&gt;
       SecRuleRemoveById 981173
      &lt;/LocationMatch&gt;
  
  
      &lt;LocationMatch "/wp-admin/plugins.php"&gt;
       SecRuleRemoveById 981173
      &lt;/LocationMatch&gt;
  
      &lt;LocationMatch "/wp-admin/customize.php"&gt;
       SecRuleRemoveById 981173
      &lt;/LocationMatch&gt;
  </code></pre>
  
  <p>What I want is to consolidate everything into a single rule that uses a wildcard on <code>wp-admin</code> and <code>wp-login</code>.  </p>
  
  <p>I've tried the following but it seems to be ignored as mod_security is throwing denials..</p>
  
  <pre><code>&lt;LocationMatch "(/wp-admin/*|/wp-login/*)"&gt;
  ....
  </code></pre>
  
  <p>and also</p>
  
  <pre><code>&lt;LocationMatch "(/wp-admin/*)"&gt;
  ....
  </code></pre>
  
  <p>and also</p>
  
  <pre><code>&lt;Location "/wp-admin/*"&gt;
  ....
  </code></pre>
  
  <p>I've done some research on LocationMatch and regex but I'm not getting something here.  Is what I'm waning to do possible?</p>
  
  <p>EDIT:
  The referrer URL in the modsec_audit.log is <code>http://www.&lt;site&gt;.com/wp-admin/customize.php?theme=modality</code></p>