can't save anything

Gallex · 2015-06-01 10:16:20

hi

it’s just throws me out if i’m trying to save something.

all checks passed!
diagnostic info:

Textpattern version: 4.5.7 (r5900)
Last update: 2015-06-01 09:55:32/2015-06-01 09:54:00
Document root: /home2/grillmei/public_html (/home/grillmei/public_html)
$path_to_site: /home/grillmei/public_html
Textpattern path: /home/grillmei/public_html/textpattern
Permanent link mode: section_title
Temporary directory path: /home2/grillmei/public_html/textpattern/tmp
Site URL: www.grillmeister.ee
PHP version: 5.4.40
GD Graphics Library: bundled (2.1.0 compatible); supported formats: GIF, JPG, PNG.
Server TZ: Europe/Tallinn
Server local time: 2015-06-01 13:10:07
DST enabled?: 1
Automatically adjust DST setting?: 1
Time zone: Europe/Tallinn (7200)
MySQL: 5.6.22-cll-lve
Locale: en_GB.UTF-8
Server: Apache
PHP server API: cgi-fcgi
RFC 2616 headers: 0
Server OS: Linux 2.6.32-531.29.2.lve1.3.11.1.el6.x86_64
Active plugins: zem_contact_reborn-4.0.3.20, zem_contact_lang-4.0.3.6, rah_metas-1.5, upm_image-0.6.2, upm_img_popper-1.3.7m, rah_sitemap-1.2, adi_notes-1.0
Admin-side theme: classic 4.5.7

<code>.htaccess</code> file contents:
————————————

————————————

gaekwad · 2015-06-01 10:24:22

Hey gallex – try adding this to the end of your .htaccess:

<IfModule mod_security.c>
SecRuleEngine Off
SecFilterInheritance Off
SecFilterEngine Off
SecFilterScanPOST Off
</IfModule>

Bloke · 2015-06-01 10:25:16

Gallex wrote #291205:

it’s just throws me out if i’m trying to save something.

Everything? Articles? Images? Pages / Forms? Sections?

If it logs you out of the admin side every time and Pete’s suggestions doesn’t work, it can be a sign of stuck / malformed cookie. Occasionally that happens. Long shot, but you could try deleting your txp_login cookie, refresh and try logging in again.

Gallex · 2015-06-01 11:06:43

thank’s pete, it helped!

so, what caused this?

gaekwad · 2015-06-01 11:10:35

It’s likely a setting in Apache’s mod_security module triggers an alarm or warning at your web host, which results in you being thrown out.

It doesn’t appear to be a widespread problem in my experience, but that block of text usually lowers the sensitivity level to a more appropriate level.

Gallex · 2015-06-01 11:33:02

clear.

so, i need every time new txp version comes out, add those lines to new .htaccess file

colak · 2015-06-01 11:36:31

Gallex wrote #291212:

clear.

so, i need every time new txp version comes out, add those lines to new .htaccess file

Unlest your host changes something in their server configuration, yes

ruud · 2015-06-01 11:38:07

Or you can put it in a .htaccess file inside the /textpattern directory, because that’s where it is needed.

gaekwad · 2015-06-01 11:46:39

ruud wrote #291215:

Or you can put it in a .htaccess file inside the /textpattern directory, because that’s where it is needed.

Actually, this – Ruud’s answer is more appropriate and accurate than mine.

The action that is the tripping the alarm takes place inside the Textpattern interface, which happens inside /textpattern/, so writing those lines to /textpattern/.htaccess (which will likely not exist at the moment) will be better.

Putting the code in the root .htaccess file means the security will be lowered on all parts of the site, not just the Textpattern interface, which may increase your website’s attack surface slightly.

Gallex · 2015-06-01 13:11:53

gaekwad wrote #291217:

The action that is the tripping the alarm takes place inside the Textpattern interface, which happens inside /textpattern/, so writing those lines to /textpattern/.htaccess (which will likely not exist at the moment) will be better.

did. now it throws me out under pages and css tabs, but don’t under form and write. ;)

gaekwad · 2015-06-01 13:28:15

Two options:

switch the code to the root .htaccess file
speak to the host to see why this is happening – they may lower the sensitivity if you request it

Textpattern CMS

Textpattern CMS support forum

#1 2015-06-01 10:16:20