Lifelesspeople.com

 Forum FAQsForum FAQs  Knowledge BaseKnowledge Base  RulesRules   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   HostingHosting   RegisterRegister 
 DonateDonate   WikiWiki   ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

mod_security problems?

 
Lifelesspeople.com Forum Index -> Server Support Questions
Post new topic   Reply to topic View previous topic :: View next topic  
Author Message
Rashy
Lifeless Person


Joined: 25 Sep 2006
Posts: 645


PostPosted: Fri Feb 08, 2008 5:16 pm    Post subject: mod_security problems? Reply with quote

Hi Trel!

I'm running Wordpress 2.3.3 on my hosting here and I am having trouble with posting. I can't create new posts or edit existing posts.

I get this error:

Method Not Implemented

POST to /wp-admin/post.php not supported.

A quick Google search brought up some results from the wordpress support forums:

http://wordpress.org/support/topic/135246

As well as a number of other people having related issues with mod_security

I wasn't sure if it was mod_security at first because you updated it 3 days ago, and I have made some edits to posts, but I read that one person had trouble only when they tried to add formatting (which is what I did today), so I am a little more positive now.

The .htaccess changes they suggested weren't helpful at all, and I can't change module .conf files Wink

Thank you for helping me out!

(temporarily I can manually create my posts in PHPMyAdmin Silly)
_________________
Rashy!
Back to top
 
LP-Trel
Zen


Joined: 02 Dec 2002
Posts: 5730
Location: Nirvana by Boredom

PostPosted: Fri Feb 08, 2008 7:50 pm    Post subject: Reply with quote

The build of mod_security2 we're running here is somewhat different than what you will see elsewhere to give you access to more control over how it works on your websites. The modifications haven't been fully tested so I can't provide the documentation on how to control it just yet.

Apparently what you are editing is matching the following:

Matched signature <src=\\"ht tp:>"]

That is triggering an XSS filter and is what you are having trouble with.
_________________
* Knowledge Base * Wiki * Forum FAQs *
Back to top
 
Rashy
Lifeless Person


Joined: 25 Sep 2006
Posts: 645


PostPosted: Sat Feb 09, 2008 1:53 pm    Post subject: Reply with quote

Heh, that went right over my head.

I know my img tags were correct (that seems to be the only tag I am having trouble with right now):

<img src=" http :// rashy.org/articleimg/data/womenvoters.png" alt="Women Voters" style="float:left;" />

So I would have to change it to be without the http:// ?

<img src= " rashy.or g/articleimg...."

(or a www.rashy.org if that fails?)

Or another option would be to hack the core of WordPress (not that big of a deal for me...) to make it evaluate the form differently so as not to get caught by the XSS filters?

EDIT: I had to add spaces in the above img tags becuase when I didn't I got the same error that I get on my website:

[img:f15bf3eb45]http://img229.imageshack.us/img229/1697/screenshotsm4.th.png[/img:f15bf3eb45]
_________________
Rashy!
Back to top
 
LP-Trel
Zen


Joined: 02 Dec 2002
Posts: 5730
Location: Nirvana by Boredom

PostPosted: Mon Feb 11, 2008 6:39 am    Post subject: Reply with quote

Code:

<IfModule mod_security2.c>
SecRuleRemoveById 950004
</IfModule>


put that into the wp-admin directory of your blog. It should take care of the problem by removing the rule for that folder.
_________________
* Knowledge Base * Wiki * Forum FAQs *
Back to top
 
Rashy
Lifeless Person


Joined: 25 Sep 2006
Posts: 645


PostPosted: Mon Feb 11, 2008 3:30 pm    Post subject: Reply with quote

Thank you Trel Wink
_________________
Rashy!
Back to top
 
Display posts from previous:   
Post new topic   Reply to topic    Lifelesspeople.com Forum Index -> Server Support Questions All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Home | Hosting | News | Forum | Links | System Status | About | Archive | Donate ]
Powered by phpBB © 2001, 2002 phpBB Group
All trademarks and copyrights on this page are owned by their respective owners. Posts and comments are owned by the poster. Everything else © 2001 - 2007 Lifelesspeople.com