Go to main content

Textpattern CMS support forum

You are not logged in. Register | Login | Help

#13 2013-11-28 03:16:50

gomedia
Plugin Author
Registered: 2008-06-01
Posts: 1,373

Re: [solved] Plugin code is not saved after editing

aslsw66 wrote:

Thanks a lot for this. I’ve been getting the same errors for ages. Each time I would contact my hosting company …

You don’t use FLUCCS do you? I think I’ll ask a pertinent question of the hosting company myself. I’ve only noticed this issue recently but it might’ve just been a fluke as most of my development is done on my Mac which doesn’t have any extra security running on its web server.

Last edited by gomedia (2013-11-28 03:44:20)

Offline

#14 2013-11-28 03:27:30

gomedia
Plugin Author
Registered: 2008-06-01
Posts: 1,373

Re: [solved] Plugin code is not saved after editing

Here’re the results of some testing.

I’ve found a couple of strings that cause this issue and it all depends where I stick them. Using the article edit tab as a test bed I get:

http://www.blahblah.com
Custom field – FAIL
Keywords – FAIL
Title – OK
Body – OK
Excerpt – OK

/usr/local/mysql/bin/mysql
Custom field – FAIL
Keywords – OK
Title – FAIL
Body – OK
Excerpt – FAIL

There’s nothing consistent – some textareas (e.g. Keywords, Excerpt) are not immune and there’s something specific about “/usr/local/mysql/bin/mysql” that is causing the issue. Probably the “bin” part – “/asd/zxc/qwe” is acceptable.

I hope this is not going to cause a big problem for us all in the future …

Last edited by gomedia (2013-11-28 03:44:55)

Offline

#15 2013-11-28 04:49:52

gomedia
Plugin Author
Registered: 2008-06-01
Posts: 1,373

Re: [solved] Plugin code is not saved after editing

Just heard back from my hosting chaps. The URL data submit is triggering this – WAF 340162. There’s an offer on the cards to have it switched off, I’ll keep you posted.

Offline

#16 2013-11-28 08:42:44

gomedia
Plugin Author
Registered: 2008-06-01
Posts: 1,373

Re: [solved] Plugin code is not saved after editing

This is what has worked for me:

Speak to your friendly hosting provider and ask them to whitelist some ModSecurity IDs:

  • 340009 – to fix the “/usr/local/mysql/bin/mysql” (or similar) issue
  • 340113, 340162 and 340163 – to fix the “http://www.blahblah.com” URL issue

I’m told it works on a per account basis, which includes any subdomains, and is permanent (i.e. doesn’t disappear after a server reboot).

Offline

#17 2013-11-28 10:55:26

alivato
Member
Registered: 2011-03-31
Posts: 151

Re: [solved] Plugin code is not saved after editing

I wanted to change the position of the plugin(lam_image_uploader). From left to right.
How to do it?

Last edited by alivato (2013-11-28 10:56:57)

Offline

#18 2013-11-28 14:18:56

uli
Moderator
From: Cologne
Registered: 2006-08-15
Posts: 4,304

Re: [solved] Plugin code is not saved after editing

Adi, thanks for the detailled informations!

alivato, the easiest among the possibilites you’re offered here is, probably, you install ied_plugin_composer, and try your editing there. If you can’t save there, too, go local on a XAMP/WAMP/MAMP Textpattern installation, edit it there in ied_plugin_composer, save it as an installable plugin file (.txt) and install that file on your online website.


In bad weather I never leave home without wet_plugout, smd_where_used and adi_form_links

Offline

#19 2013-11-29 09:33:32

alivato
Member
Registered: 2011-03-31
Posts: 151

Re: [solved] Plugin code is not saved after editing

thx, I installed TXP on the local machine and edited plugin.

Offline

#20 2016-06-08 22:17:04

lazlo
Member
Registered: 2004-02-24
Posts: 110

Re: [solved] Plugin code is not saved after editing

gomedia wrote #276987:

This is what has worked for me:

Speak to your friendly hosting provider and ask them to whitelist some ModSecurity IDs:

  • 340009 – to fix the “/usr/local/mysql/bin/mysql” (or similar) issue
  • 340113, 340162 and 340163 – to fix the “http://www.blahblah.com” URL issue

I’m told it works on a per account basis, which includes any subdomains, and is permanent (i.e. doesn’t disappear after a server reboot).

Another problematic ModSecurity has the number “390715” at least it did in my case.

Offline

#21 2016-06-08 22:56:40

kuopassa
Plugin Author
From: Porvoo, Finland
Registered: 2008-12-03
Posts: 229
Website

Re: [solved] Plugin code is not saved after editing

aslsw66, if you dare and if you have access to phpMyAdmin, you could modify plugin’s code from there.

Offline

Board footer

Powered by FluxBB