Welcome, Guest. Please login or register.
Did you miss your activation email?
May 26, 2012, 11:56:19 PM

Login with username, password and session length
Search:     Advanced search
Interested in joining the WebsiteBaker team?
For more Information read here or on our new website.
155556 Posts in 21715 Topics by 7737 Members
Latest Member: gx-world
* Home Help Search Login Register
Pages: [1]   Go Down
Print
Author Topic: mod_security 2 compliance  (Read 222 times)
Xagone
AddOn Development
*
Offline Offline

Posts: 478



WWW
« on: February 06, 2012, 09:41:06 PM »

Hi Smiley

I love WB but now i've got a problem.

WB2.8.2RC2 is not mod_security 2 compliant!

I know... mod_security pretty much sucks, but funio.com on witch I have ~100 WB install just activate mod_security 2 and prohibited us to turn it off by causing a 500 error if we try to turn mod_security off via .htaccess

sooo... we will all whitelist all our install BUT, it would be great if WB was mod_security compliant!

The vast majority of problem comes from the fact that FCKEditor do not work with mod_security but CKEditor do (tried it, it works)

and i've encontered some problems saving the settings...
Logged

Xagone Inc. (formerly VotreEspace)
http://www.xagone.com/
kweitzel
Forum administrator
*****
Offline Offline

Posts: 6977


WWW
« Reply #1 on: February 06, 2012, 10:40:09 PM »

Hi,

could you get some more specific information on what fails, errors and information like that? You might also want to chek with luisehahne for the betatesting programm ... just send him a PM if you are not yet signed up.

cheers

Klaus
Logged

WebsiteBaker Org e.V. - for WebsiteBaker

kibmcz

Offline Offline

Posts: 217



WWW
« Reply #2 on: February 23, 2012, 02:49:29 AM »

I am having a mod_security (http://www.modsecurity.org/) issue too.. this time its with http://www.liquidweb.com i can give you more details on the errors.

Any time a policy is hit it goes error 403 the problem urls are:

Internal functions
------------------------
You don't have permission to access /admin/settings/save.php on this server.
You don't have permission to access /admin/settings/save.php on this server.
You don't have permission to access /modules/form/save_settings.php on this server.

Addons
----------
You don't have permission to access /modules/sitemap/save.php on this
server.

I think it would be important to get support for that built in.
« Last Edit: February 23, 2012, 03:37:46 AM by kibmcz » Logged
Xagone
AddOn Development
*
Offline Offline

Posts: 478



WWW
« Reply #3 on: February 23, 2012, 05:21:19 AM »

Liquid is on iWeb platform... so iweb.com (funio) is the same problem as me... just, go away from them
Logged

Xagone Inc. (formerly VotreEspace)
http://www.xagone.com/
Pages: [1]   Go Up
Print
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines Valid XHTML 1.0! Valid CSS!