diff --git a/nginx/modsecurity/global-exceptions.conf b/nginx/modsecurity/global-exceptions.conf
index 876d8d9..2588354 100644
--- a/nginx/modsecurity/global-exceptions.conf
+++ b/nginx/modsecurity/global-exceptions.conf
@@ -151,6 +151,6 @@ SecRule REQUEST_URI "@beginsWith /ocs/v2.php/apps/forms/api/" \
     nolog, \
     ctl:ruleEngine=Off, \
     msg:'TUNING: ModSecurity desativado para a API do Nextcloud Forms'"
-SecRule REQUEST_METHOD "@streq PUT" "phase:2,id:1001,chain,nolog,pass"
+SecRule REQUEST_METHOD "@streq PUT" "phase:1,id:1001,chain,nolog,pass"
     SecRule REQUEST_URI "@rx ^/apps/integration_onedrive/(?:admin-config|sensitive-admin-config)$" \
         "t:none,ctl:ruleRemoveById=949110"