Textpattern CMS support forum
You are not logged in. Register | Login | Help
- Topics: Active | Unanswered
#1 2011-09-07 03:12:11
- GugUser
- Member
- From: Quito (Ecuador)
- Registered: 2007-12-16
- Posts: 1,477
bot_cf_titles doesn't work as expected
I need help:
I have several TxP installations with TxP 4.4.1, glz_custom_fields 1.3.0 and bot_cf_titles 0.3. All these installations work fine, except one of them. Those who are working are the product of multiple updates from Textpattern and glz_custom_fields.
Only in one installation, a new installation of Textpattern 4.4.1 and the above mentioned plug-ins, the plug-in bot_cf_titles 0.3 doesn’t work as expected. When I want to save the configuration, then returns a 403 error page “You don’t have permission to access /textpattern/index.php on this server”. Except this error everything works.
And by the way: What happened with this announcement?
Thank you for helpful answers!
Last edited by GugUser (2011-09-07 14:23:50)
Offline
#2 2011-09-07 10:17:13
- uli
- Moderator
- From: Cologne
- Registered: 2006-08-15
- Posts: 4,315
Re: bot_cf_titles doesn't work as expected
GugUser wrote:
When I want to save the configuration
I presume you’re trying to save the plugin code you just changed. Did you think of mod_security?
In bad weather I never leave home without wet_plugout, smd_where_used and adi_form_links
Offline
#3 2011-09-07 14:17:20
- GugUser
- Member
- From: Quito (Ecuador)
- Registered: 2007-12-16
- Posts: 1,477
Re: bot_cf_titles doesn't work as expected
Yes, it works adding in the .htaccess-file:
<IfModule mod_security.c>
SecFilterScanPOST Off
</IfModule>But, why?
The others mentioned installations, where the problem doesn’t occur, have the same configurations. In addition: In the same installation, where I could not save the changes in the code of the plug-in bot_cf_titles (configuration), I could save changes in the code of the plug-in bot_show_image (name of the image folder), before the addition in the .htaccess-file.
I can’t understand this, it seems to me to be illogical.
But anyway, thanks for your help, uli.
Offline
Re: bot_cf_titles doesn't work as expected
GugUser wrote:
I can’t understand this, it seems to me to be illogical.
Mod_security is a security filter module. It blocks requests based on the contents of the sent package. For example if term “foobar” is blacklisted, and then the plugin code contains word “foobar”, the request will be blocked. What is blocked depends on what the sent package contains, and what filter is set to block.
Offline
#5 2011-09-07 14:25:14
- GugUser
- Member
- From: Quito (Ecuador)
- Registered: 2007-12-16
- Posts: 1,477
Re: bot_cf_titles doesn't work as expected
Thanks for the explanation, Gocom.
Offline
#6 2011-09-08 18:09:45
- redbot
- Plugin Author
- Registered: 2006-02-14
- Posts: 1,410
Re: bot_cf_titles doesn't work as expected
Hi,
first of all thank you Uli and Jukka for answering the question. I admit I wouldn’t be able to solve it by myself.
Apart from this I wonder which term in the code could be blacklisted.
Since you said the error is triggered when you save the configuration could it be that mod_security doesen’t like some of titles you are saving?
Offline
#7 2011-09-08 18:29:00
- GugUser
- Member
- From: Quito (Ecuador)
- Registered: 2007-12-16
- Posts: 1,477
Re: bot_cf_titles doesn't work as expected
redbot schrieb:
Since you said the error is triggered when you save the configuration could it be that mod_security doesen’t like some of titles you are saving?
The titles are “Motto” and “Kurze Beschreibung des Inhaltes”, nothing dangerous.
;-)
Offline
#8 2011-09-08 18:49:13
- redbot
- Plugin Author
- Registered: 2006-02-14
- Posts: 1,410
Re: bot_cf_titles doesn't work as expected
GugUser wrote:
The titles are “Motto” and “Kurze Beschreibung des Inhaltes”, nothing dangerous. ;-)
Well… the latter scares me a bit ;-)
Anyway I’m glad you managed to fix the problem for now.
Offline