Modsecurity issue (404 on video update)
-
Great plugin! Saved me a lot of work – one issue:
Update videos will present you with an error 404 if your server has Modsecurity enabled and uses the ASL ruleset.
Full details:
Message: Access denied with code 403 (phase 2). Pattern match “(?:(?:select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe):space:+[a-z|0-9|\|\,]+:space:+(?:from|into|table|database|index|view):space:+[a-z|0-9|\| |\,]|\bunion\b.{1,256}?select.[a-z0-9].(?:from|#| …” at ARGS:Submit. [file “/usr/local/apache/conf/modsec_rules/10_asl_rules.conf”] [line “316”] [id “340016”] [rev “32”] [msg “Atomicorp.com Rules: Possible SQL injection attempt detected”] [data “update videos from c”] [severity “CRITICAL”]TEMP Fix:
Ask your hosting provider to whitelist rule 340016 on your wp-admin directory.
FULL Fix: All of the form fields in the plugin need encoding properly before the request is made.
- The topic ‘Modsecurity issue (404 on video update)’ is closed to new replies.
