Client cannot add an image but I can

  • Resolved awakegal

    (@awakegal)


    10 years, 1 month ago

    My client cannot add an image that is in the media file to her blog post. She gets Error Message 204.

    However I can add the image without incident.

    I can disable Rule ID 204, but that makes me nervous as it says SQL Injection.

    Also, why can I add the image and she cannot?

    Log Below.

    Thanks in Advance!

    15/Oct/14 12:17:52 #5668210 critical 204 Her IP Address
    POST /wp-admin/post.php – SQL injection (equal operator) – [POST:content = [caption id="attachment_1576" align="alignleft" width="300"]<img src=”https://website.org/wp…%5D

    https://www.ads-software.com/plugins/ninjafirewall/

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author nintechnet

    (@nintechnet)

    Hi,

    Is this person an admin or publisher/editor?

    You can disable rule #204, it is a generic rule and not the most important regarding SQLi protection.
    I will change it to prevent this kind of false positive. You could re-enable it when we will release the next update of NinjaFirewall

    Thread Starter awakegal

    (@awakegal)

    This person is an editor.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Client cannot add an image but I can’ is closed to new replies.