ndray

“I” did manage to solve the problem…

I left the CMS alone for a while then, a few days later, I came back and saw that there was a newer wordpress version… I upgraded my instalation and the problem was gone.

I don’t know if the solution was the upgrade or something happened in my server… I did talk to them about the issue, maybe they did something… Try to figure what’s going on with your host providers…

I now know that mod_security2 is causing this problem. Disabling it is not a solution.

The module is blocking the POST:

Mon Sep 08 16:34:57 2008] [error] [client 213.22.159.193] ModSecurity: Access denied with code 400 (phase 2). Pattern match “\\\\%(?!$|\\\\W|[0-9a-fA-F]{2}|u[0-9a-fA-F]{4})” at ARGS:selection. [id “950107”] [msg “URL Encoding Abuse Attack Attempt”] [severity “WARNING”] [hostname “bugflux.org”] [uri “/wp-admin/options-permalink.php”] [unique_id “KVUMRH8AAAEAAGwKyAoAAAAI”]

I’d like to know if there’s any workaround or solution for this as my host is not willing to disable it, and this should not happen anyways, I believe…